Splunk Enterprise Security

Health Check:msg="A script exited abnormally with exit status:1"

schandrasekar
Loves-to-Learn

Health Check:msg="A script exited abnormally with exit status:1" are poppling for below inputs
input=".opt/splunk/etc/apps/SA-Utils/bin/dm_accel_settings.py"
input="opt/splunk/etc/apps/SA-Utils/bin/configuration_check.py"

Internal log for all above shows "Client is not authenticated"

Internal log dm_accel_settings.log
ERROR pid=23024 tid=MainThread file=dm_accel_settings.py:run:182 | status="REST exception encountered when updating acceleration settings" model=Splunk_Audit,exc=[HTTP 401] Client is not authenitcated
ERROR pid=23024 tid=MainThread file=dm_accel_settings.py:run:182 | status="REST exception encountered when updating acceleration settings" model=Risk,exc=[HTTP 401] Client is not authenitcated
ERROR pid=23024 tid=MainThread file=dm_accel_settings.py:run:182 | status="REST exception encountered when updating acceleration settings" model=Incident_Management,exc=[HTTP 401] Client is not authenitcated
ERROR pid=23024 tid=MainThread file=dm_accel_settings.py:run:182 | status="REST exception encountered when updating acceleration settings" model=Endpoint,exc=[HTTP 401] Client is not authenitcated
ERROR pid=23024 tid=MainThread file=dm_accel_settings.py:run:182 | status="REST exception encountered when updating acceleration settings" model=Domain_Analysis,exc=[HTTP 401] Client is not authenitcated
ERROR pid=23024 tid=MainThread file=dm_accel_settings.py:run:182 | status="REST exception encountered when updating acceleration settings" model=Change,exc=[HTTP 401] Client is not authenitcated

Internal log

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!