Deployment Architecture

Why are we seeing search peer error "A script exited abnormally" on our deployment server and how do we stop it?

jsbollard
New Member

Getting multiples of the error below on our Deployment Server. Only references the server where Enterprise Security is installed. Help!

Search peer  has the following message: msg="A script exited abnormally" input="C:\Program Files\Splunk\bin\splunk-powershell.exe" stanza="default" status="exited with code 1"
0 Karma

maclel
Engager

Appears it is a known issue if you have a look at this answer page, and for the moment just follow the answer posted to suppress it:

https://answers.splunk.com/answers/313159/after-upgrading-my-indexer-and-search-head-to-splu.html

0 Karma

muebel
SplunkTrust
SplunkTrust

Hi jsbollard, That error doesn't seem to be related necessarily to Enterprise Security, but rather some scripted input. I'd scrutinize your input definitions, specifically any one of them that mentions powershell. If the scripted input isn't working, you can disable for the moment in order to avoid the error message (or otherwise figure out why it's failing).

Please let me know if this helps!

jsbollard
New Member

I'm still getting the error and am considering upgrading to the new 4.1 version of ESS.

0 Karma

Fraankiiie
Engager

i have the same problem, did you fixed this already or is it resolved in further updates from ESS?

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...