Splunk Search

Getting errors for every search I run

New Member

Hi All,

I am getting below error for every search I am rinning for Summary indexing.

Search process did not exit cleanly, exit_code=255, description="exited with code 255". Please look in search.log for this peer in the Job Inspector for more info.

This error is coming for all the indexers.

I have read couple of splunk annwers and then removed huge csv's from lookups directory by blacklisting them from distsearch.conf, but still my searches are failing.

I am not able to do this :

It throws error.
I checked the size of the bundles on search heads and indexers and the size of the bundle is same.
Then why am I getting error while searching.

Thanks ,

Tags (1)
0 Karma


Open the job inspector and look in search.log for errors and post any you find there.

255 is an exit code from a python function (probably os.subprocess) and is probably related to file permissions on the disk.

Is the splunkd process running as the correct user? Did it run as root once and now it's running as less priveleged user now?

You may need to recursively chown the Splunk directory 'chown -Rf splunkuser:splunkgroup /path/to/splunk' after stopping Splunkd and insuring it will start as the correct user next time.

This is linux right?

0 Karma

New Member

Splunk version is 6.1.4

0 Karma
Get Updates on the Splunk Community!

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...