How do I resolve MLTK error with non-zero error code 1?

[rendie]

Hi everyone,

I installed Machine Learning Splunk Tools for testing from Splunkbase, and after trying run ml I got error. What can I do to resolve it?

Error in 'fit' command: External search command exited unexpectedly with non-zero error code 1.

Thanks.

[twesty]

Take a look in the search.log (accessed via the job inspector). That error usually happens when something happens in a python scripted search command and that log usually contains the reason for failure.

[rendie]

@twesty Searches are defaults from Showcase examples where data loading from CSV. I can't understand what wrong because I have not issues with search running or reading csv file. In the _internal index, I have not errors too. Only message about non-zero error code 1 in MLTK application.

[splunkoptimus]

Solution is in this thread

https://atc.bmwgroup.net/bitbucket/projects/SPLUNK/repos/splunk-aws-emea-onboarding/pull-requests/73...

[BernardEAI]

@rendie  have you been able to resolve this problem? I'm stuck with the same issue. I have tried re-installing the PSC app, but no success.

[rendie]

I did not solve this problem. I reinstalled Splunk, this action helped me. The root cause of the issue I don't know.

[twesty]

I think it's likely to be due to a missing input or something. If the UI isnt particularly clear as to whats missing then I would raise a support ticket as a bug. however I would check in the search.log first to see what the error is.