Splunk Search

Can Add-on Debug Refresh be run from a cluster

robertlynch2020
Influencer

Hi @MuS 

Sorry for the direct contact, I hope it's ok to ask you a question about "Add-on Debug Refresh".

I have used it for years and it's brilliant, however, I have just moved to a cluster(Christmas 2020) 1 SH, 1MN, and 3 INDEXERS but I have your app installed on the search head, but I keep getting this when running it. "External search command 'refresh' returned error code 1. ."

I have the permissions set to read and write form ADMIN and I am logged in as ADMIN.

Any ideas, what I might need to do as I really love this tool.

Robbie

Labels (1)
Tags (1)
0 Karma
1 Solution

MuS
Legend

Hi Robert,

This is caused by some error not being caught correctly by the script. The refresh actually works just the feedback is wrong. I should get that fixed at one point 😕

cheers,

Michael / MuS

View solution in original post

MuS
Legend

Hi Robert,

This is caused by some error not being caught correctly by the script. The refresh actually works just the feedback is wrong. I should get that fixed at one point 😕

cheers,

Michael / MuS

Get Updates on the Splunk Community!

Stay Connected: Your Guide to February Tech Talks, Office Hours, and Webinars!

💌 Keep the new year’s momentum going with our February lineup of Community Office Hours, Tech Talks, ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Incident Response: Reduce Incident Recurrence with Automated Ticket Creation

Culture extends beyond work experience and coffee roast preferences on software engineering teams. Team ...