topic Re: commandline method to test Splunk over UDP? in Deployment Architecture

commandline method to test Splunk over UDP?

tedder — Wed, 29 Sep 2010 01:02:44 GMT

There must be an easy way to fire a single message over UDP to a splunk forwarder/server. "logger" nearly does it. I want to do something like this:

testlogger -h host -p port "message to log in Splunk"

Let me specify- Unix commandline. I suppose I could write a few lines of code, but am I the first person to want this?

ziegfried — Wed, 29 Sep 2010 01:18:29 GMT

You can use netcat for this purpose:

echo "message to log in Splunk" | nc -u -q 0 <HOST> <PORT>

Example:

echo "message to log in Splunk" | nc -u -q 0 localhost 514

(This works on Linux)

On a Mac, you have to use the -w option instead of -q

echo "message to log in Splunk" | nc -u -w 0 splunkhost.mydomain.com 514

Maybe the netcat command is different on other *nix systems as well.

tedder — Wed, 29 Sep 2010 01:28:52 GMT

thanks! That's exactly what I was looking for.