Splunk Enterprise

Error: External search command <file.bat> returned error code 1.

spisiakmi
Contributor

Hi. I create simple file.bat file, which I placed it into .etc/apps/appname/bin

I created commands.conf in ./etc/apps/appname/local and its content is:

[sps_export_vitocharge]
filename = sps_export_vitocharge.bat
chunked = true
I restarted teh Splunk instance
 
I try to run this search:
 
my_search
| outputcsv sps_export_vitocharge
| script sps_export_vitocharge
 
and I receive error message:
Error: External search command <file.bat> returned error code 1.
The file.bat is only simple move of this generated csv file. It works from the shell window. Can anybody help me, please?
Labels (1)
0 Karma
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...