Splunk Enterprise

MLTK error with non-zero error code 1.

rendie
Path Finder

Hi everyone,

I installed Machine Learning Splunk Tools for testing from Splunkbase, and after trying run ml I got error. What can I do to resolve it?

Error in 'fit' command: External search command exited unexpectedly with non-zero error code 1.

Thanks.

Labels (2)
0 Karma

twesty
Path Finder

Take a look in the search.log (accessed via the job inspector). That error usually happens when something happens in a python scripted search command and that log usually contains the reason for failure.

0 Karma

rendie
Path Finder

@twesty Searches are defaults from Showcase examples where data loading from CSV. I can't understand what wrong because I have not issues with search running or reading csv file. In the _internal index, I have not errors too. Only message about non-zero error code 1 in MLTK application.

0 Karma

BernardEAI
Communicator

@rendie  have you been able to resolve this problem? I'm stuck with the same issue. I have tried re-installing the PSC app, but no success.

0 Karma

rendie
Path Finder

I did not solve this problem. I reinstalled Splunk, this action helped me. The root cause of the issue I don't know.

twesty
Path Finder

I think it's likely to be due to a missing input or something. If the UI isnt particularly clear as to whats missing then I would raise a support ticket as a bug. however I would check in the search.log first to see what the error is. 

0 Karma
Get Updates on the Splunk Community!

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...