Splunk Search

Can Add-on Debug Refresh be run from a cluster

robertlynch2020
Influencer

Hi @MuS 

Sorry for the direct contact, I hope it's ok to ask you a question about "Add-on Debug Refresh".

I have used it for years and it's brilliant, however, I have just moved to a cluster(Christmas 2020) 1 SH, 1MN, and 3 INDEXERS but I have your app installed on the search head, but I keep getting this when running it. "External search command 'refresh' returned error code 1. ."

I have the permissions set to read and write form ADMIN and I am logged in as ADMIN.

Any ideas, what I might need to do as I really love this tool.

Robbie

Tags (1)
0 Karma
1 Solution

MuS
Legend

Hi Robert,

This is caused by some error not being caught correctly by the script. The refresh actually works just the feedback is wrong. I should get that fixed at one point 😕

cheers,

Michael / MuS

View solution in original post

MuS
Legend

Hi Robert,

This is caused by some error not being caught correctly by the script. The refresh actually works just the feedback is wrong. I should get that fixed at one point 😕

cheers,

Michael / MuS

Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...