Troubleshooting¶

Below are some pointers to help in debugging the application:

Search for modular input errors¶

Run a search for the following and see if the logs indicate a problem with the modular input:

index=_internal sourcetype=file_meta_data_modular_input

Also search for indications that the script could not be executed by Splunk:

index=_internal ExecProcessor "file_meta_data"  sourcetype=splunkd