Powershell scripted input debug logging

atownson — Fri, 16 Oct 2020 18:17:48 GMT

Does anyone know how to log INFO and WARN log_level events to $SplunkHome\var\log\splunk\splunk-powershell.ps1.log or $SplunkHome\var\log\splunk\splunkd.log for debug purposes using the powershell input?

Using the code below in the script terminates it:

Write-Error -Message 'INFO test'

10-16-2020 12:47:05.4859538-5 ERROR Executing script=& "$SplunkHome/etc/apps/foo/bin/foo.ps1" for stanza=foo failed with exception=INFO test

The script does run correctly. I would just like to have some debug options. Thanks.

Re: Powershell scripted input debug logging

jeremyhagand61 — Fri, 18 Dec 2020 10:58:53 GMT

Did you ever work this out? I've tried Write-Warning, but the output didn't go into the log or into the indexed output

topic Powershell scripted input debug logging in Splunk Enterprise

Powershell scripted input debug logging

Re: Powershell scripted input debug logging