I'm running Splunk Enterprise 6.4.1 on a Centos 7 machine. I need to backfill my summary index. I am running the following command on the searchhead :
./splunk cmd fill_summary_index.py -app br -name br_volume_summary -et -1d@d -lt now -dedup true -nolocal true -auth admin: -owner ldc
The saved search is owned by ldc and has permission set to app with read/write to admin. The error I get is:
couldn't run "/opt/splunk/bin/fill_summary_index.py": Exec format error
I thought maybe my aruments were invalid, so I tried to run with no arguments and got the same error. Any thoughts as to what it could be?
the same issue here