1. uberAgent Support
  2. Community
  3. General Discussion
New post
0

Search job terminated

Avatar
Mike B

I installed uberAgent & Splunk into my XenApp farm on Monday.  It's XenApp 1906.1 with 2 DDCs and the 6 XA Servers running on PVS.  I'm getting data from everything except User Logon Duration.  When I go to the option in the Dashboard I just get a red ! with "The search job terminated unexpectedly".  There is data in charts the User Logon Duration - Group Policy dashboard but the Data table window has the same "Search Job terminated" message.

Date Votes

5 comments

  • Avatar
    Timm Brochhaus Official comment

    Hi Mike, 


    Could you please let us know which version of Splunk you are running? 

    Thanks, Timm

  • 0
    Avatar
    Mike B

    Hi Timm,

     

    8.05.  Just downloaded this week, installed with all defaults on Windows Server 2012 R2.

     

    Thanks,

     

    Mike

  • 0
    Avatar
    Timm Brochhaus

    Hi Mike, 

    We've seen the same issue at other customers after upgrading to Splunk 8.0.4 or newer. Could you maybe reinstall Splunk with an older version, e.g., 8.0.3? After downgrading the Splunk instance, you should be able to see all data in the pre-built dashboards without any issues.

    Older versions of Splunk are available here.

    Thanks, Timm

  • 0
    Avatar
    Mike B

    Hi Timm,

    Thanks, that looks like it fixed it.  I took the defaults during install of Splunk, which I just read installed Python 2.7.   Do I need to update to 3.7?  I assume there's a 3.7 for Windows?

    Thanks,


    Mike

  • 0
    Avatar
    Timm Brochhaus

    Hi Mike, 

    Great to hear that the uberAgent dashboards as now showing data after the Splunk downgrade. 

    From an uberAgent perspective, it is not required to update Python. 

    Thanks, Timm

Please sign in to leave a comment.