I have a simple bash script that I've configured as the coldToFrozenScript:
set -e
set -u
if [ $# -lt 1 ]; then
echo 1>&2 "usage: $0 "
exit 1
fi
bucket=$1
index=${bucket##*/}
echo 1>&2 "aws s3 sync $bucket s3://splunk-frozen-dev/$index"
exec aws s3 sync $bucket s3://splunk-frozen-dev/$index
I get `ERROR BucketMover - coldToFrozenScript global name 'ssl' is not defined`in the logs when Splunk executes this script:
05-04-2016 19:12:13.168 +0000 INFO BucketMover - will attempt to freeze: candidate='/opt/data1/audit/db/db_1462388517_1462384687_1' because frozenTimePeriodInSecs=300 is exceeded by the difference between now=1462389133 and latest=1462388517
05-04-2016 19:12:13.174 +0000 ERROR BucketMover - coldToFrozenScript aws s3 sync /opt/data1/audit/db/db_1462388517_1462384687_1 s3://splunk-frozen-dev/db_1462388517_1462384687_1
05-04-2016 19:12:13.933 +0000 ERROR BucketMover - coldToFrozenScript global name 'ssl' is not defined
05-04-2016 19:12:14.076 +0000 ERROR BucketMover - coldToFrozenScript cmd='/opt/splunk/bin/coldToFrozenS3.sh /opt/data1/audit/db/db_1462388517_1462384687_1' exited with non-zero status='exited with code 1'
If I execute the script from the command line directly, the script completes successfully. I get the issue with Splunk Enterprise 6.3.3 and 6.4.0.
Any help appreciated.
↧