Error: External search command <file.bat> returned...

Splunk Enterprise

Hi. I create simple file.bat file, which I placed it into .etc/apps/appname/bin

I created commands.conf in ./etc/apps/appname/local and its content is:

[sps_export_vitocharge]

filename = sps_export_vitocharge.bat

chunked = true

I restarted teh Splunk instance

I try to run this search:

my_search

| outputcsv sps_export_vitocharge
| script sps_export_vitocharge

and I receive error message:

Error: External search command <file.bat> returned error code 1.

The file.bat is only simple move of this generated csv file. It works from the shell window. Can anybody help me, please?

Get Updates on the Splunk Community!

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Error: External search command <file.bat> returned error code 1.