Did I format my Splunk Input.conf file for bamboo correctly?

nehannaidu — Fri, 03 Feb 2023 15:59:15 GMT

I have edited edited Input.conf file as below.

[Bamboo://localhost:8085]
sourcetype = bamboo
interval = 60
server = http://localhost:8085
protocol = https
port = 8085
username = bamboo_user
password = bamboo_pwd
disabled = 0

Is above file is correct?

Based on this HTTP event collector will generate the token in Splunk web enterprise right?

Re: Splunk Input.conf file for bamboo

richgalloway — Fri, 03 Feb 2023 14:08:59 GMT

The btool command will tell you if the file complies with the specs.

splunk btool check

Correctness, however, is harder to define without knowing more about any add-ons these settings are for. For example, should the port number be in the server attribute if it's also specified separately? Protocol is "https", but the server value uses http. This may or may not be a problem.

The stanza will not, however, generate a HEC token. You should use the GUI (Settings->Data inputs->HTTP Event Collector) to generate a token and then put it into an [http://<<name>>] stanza in inputs.conf.

topic Did I format my Splunk Input.conf file for bamboo correctly? in All Apps and Add-ons

Did I format my Splunk Input.conf file for bamboo correctly?

Re: Splunk Input.conf file for bamboo