ERROR ScriptRunner

[shmoman]

Any idea as to what causes this error:

02-19-2014 17:17:01.577 -0500 ERROR ScriptRunner - extern write error: errno=Broken pipe
This is from the Search Heads splunkd.log.

Found a similar question asked two years ago, but there was no answer.

[jkat54]

In my case I was creating a custom search command and I didnt "receive the events from the previous search"

adding this to my python script fixed it

# get the previous search results
results,unused1,settings = splunk.Intersplunk.getOrganizedResults()

The error message is telling you it had all these events "in the pipe" being sent to your command and your command didnt handle those events.