Splunk Enterprise Security: Error SA-Utils/bin/data_migrator.py

[kirankos]

hi

After installing Enterprise Security, 4.7.6, we are constantly getting error in the console

msg="A script exited abnormally" input="/opt/splunk/etc/apps/SA-Utils/bin/data_migrator.py" stanza="default" status="exited with code 3"

Checking further in search, nothing much yield

2018-06-01 11:00:00,416 INFO pid=28552 tid=MainThread file=configuration_check.py:run:195 | status="exiting" exit_status="0"
2018-06-01 11:00:00,368 ERROR pid=28552 tid=MainThread file=configuration_check.py:run:164 | status="completed" task="confcheck_script_errors" message="msg="A script exited abnormally" input="/opt/splunk/etc/apps/SA-Utils/bin/data_migrator.py" stanza="default" status="exited with code 3""
2018-06-01 11:00:00,332 INFO pid=28552 tid=MainThread file=configuration_check.py:run:140 | status="retrieved_checkpoint_data" task="confcheck_script_errors"
2018-06-01 11:00:00,315 INFO pid=28552 tid=MainThread file=configuration_check.py:run:105 | status="enabled UI message suppression" task="confcheck_script_errors" pattern="((streamfwd|splunk-(wmi\.path|MonitorNoHandle\.exe|winevtlog\.exe|netmon\.exe|perfmon\.exe|regmon\.exe|winprintmon\.exe|admon\.exe|powershell\.exe)).*exited with code 1)"
2018-06-01 11:00:00,179 INFO pid=28552 tid=MainThread file=configuration_check.py:run:95 | status="retrieved task" task="confcheck_script_errors"
2018-06-01 11:00:00,179 INFO pid=28552 tid=MainThread file=configuration_check.py:run:88 | status="executing"
2018-06-01 11:00:00,171 INFO pid=28552 tid=MainThread file=__init__.py:execute:919 | Execute called
2018-06-01 11:00:00,170 INFO pid=28552 tid=MainThread file=configuration_check.py:<module>:200 | status="starting"

Any idea of why the error happens? or how to get some debug information of this error?

[jkat54]

See this answer and let us know if it helps:

https://answers.splunk.com/answers/511047/enterprise-security-script-exited-abnormally-statu.html