# Running Script in a Cluster

**URL:** <https://community.zeek.org/t/running-script-in-a-cluster/5798>\
**Category:** Zeek\
**Created:** [August 9, 2019, 1:38pm UTC](https://community.zeek.org/t/running-script-in-a-cluster/5798 "2019-08-09T13:38:48Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Joseph\_Kvedaras](https://avatars.discourse-cdn.com/v4/letter/j/f9ae1b/32.png) [@Joseph\_Kvedaras](https://community.zeek.org/u/Joseph_Kvedaras)\
**Post date:** [August 9, 2019, 1:38pm UTC](https://community.zeek.org/t/running-script-in-a-cluster/5798/1 "2019-08-09T13:38:48Z")

</div>

Hey,

I’m working with Zeek scripts and I am running in an issue getting my script to execute when zeek is running as a cluster. The script executes when I start zeek w/ a pcap file. The script executes when I start zeek on the command line, bind to the interface, and playback that pcap. The script does not execute when I start zeek as cluster and playback the pcap file. Other scripts, like ‘extract-all-files.bro’ run all 3 ways but in the cluster, will not write my added print outs to the stdout file in cluster mode. I have also confirmed that my scripts are being loaded by the logging module when I run “zeekctl diag”. I feel like I’m missing something. Does anyone know what it is?

Thanks

---

<div class="post-metadata">

**Author:** ![Joseph\_Kvedaras](https://avatars.discourse-cdn.com/v4/letter/j/f9ae1b/32.png) [@Joseph\_Kvedaras](https://community.zeek.org/u/Joseph_Kvedaras)\
**Post date:** [August 9, 2019, 2:32pm UTC](https://community.zeek.org/t/running-script-in-a-cluster/5798/2 "2019-08-09T14:32:33Z")

</div>

Figured it out… Permissions issue on the file. The combined stderr.log was not populated but I now see the error when running ‘zeekctl diag’ and looking under the stderr.log for the sensor.

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\
**Post date:** [May 6, 2022, 3:46pm UTC](https://community.zeek.org/t/running-script-in-a-cluster/5798/3 "2022-05-06T15:46:41Z")

</div>


