Splunk Search

Why is virtual index search showing no results found after installing Hunk?

rameez
Engager

Hello guys,

I installed hunk and followed its tutorial. I have checked the HDFS location and it seems fine. Hadoop version looks fine as well. The search.log is in pastebin http://pastebin.com/rrEJnLNA.

Any help would be appreciated

Tags (4)
0 Karma
1 Solution

Ledion_Bitincka
Splunk Employee
Splunk Employee

it seems like "Hadoop Home" is not pointing to a valid dir - not the missing leading / in the path: "/bin/bash: usr/lib/hado ..."

10-13-2014 06:56:45.686 ERROR ERP.PonyProvider -  /bin/bash: usr/lib/hadoop/bin/hadoop: No such file or directory
10-13-2014 06:56:45.687 ERROR SearchOperator:stdin - Cannot consume data with unset stream_type
10-13-2014 06:56:45.687 ERROR ExternalResultProvider - Error in 'SearchOperator:stdin': Cannot consume data with unset stream_type

View solution in original post

Ledion_Bitincka
Splunk Employee
Splunk Employee

it seems like "Hadoop Home" is not pointing to a valid dir - not the missing leading / in the path: "/bin/bash: usr/lib/hado ..."

10-13-2014 06:56:45.686 ERROR ERP.PonyProvider -  /bin/bash: usr/lib/hadoop/bin/hadoop: No such file or directory
10-13-2014 06:56:45.687 ERROR SearchOperator:stdin - Cannot consume data with unset stream_type
10-13-2014 06:56:45.687 ERROR ExternalResultProvider - Error in 'SearchOperator:stdin': Cannot consume data with unset stream_type
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...