topic Re: Distributing scripts using deployment server in Deployment Architecture

Distributing scripts using deployment server

meenuvn — Thu, 14 Jul 2016 03:50:33 GMT

Hi Splunkers,
Need help with a deployment server concept. Referred splunk docs and few similiar answers, still i'm missing something.

Scenario : I have few scripted inputs and the related input.conf which need to be distributed to a set of UFs in the environment.
Using deployment server, I created an app and then kept the script and input.conf so as to be send down to the clients.
App got distributed and is placed in etc/apps/ folder.
But for the scripted input to work, Splunk expects it to be in $SPLUNK_HOME\bin\scripts folder.

How will I handle this?

Re: Distributing scripts using deployment server

pradeepkumarg — Tue, 29 Sep 2020 10:14:06 GMT

Scripts can exist inside the apps folder etc/apps/your_app_name/bin/scripts.
You just have to make sure you call the script form your inputs as $SPLUNK_HOME$/etc/apps/your_app_name/bin/scripts/your_script

Re: Distributing scripts using deployment server

hardikJsheth — Tue, 29 Sep 2020 10:14:08 GMT

You can keep script in $SPLUNK_HOME/etc/apps/your_app/bin/ folder. The entry in the inputs.conf should be same as before.
i.e
[script://./bin/Server.py]
disabled = false
interval = 0

Splunk first look for script in the bin folder of the app, then bin folder of the search app and finally under $SPLUNK_HOME/bin/scripts/

Re: Distributing scripts using deployment server

meenuvn — Tue, 29 Sep 2020 10:14:11 GMT

Thanks for the quick reply gpradeepkumarreddy & hardikJsheth.
So I'm now retrying like this
1. KEpt the script under Scripts/bin/scripts folder.
2. Added input.conf file under Scripts/local folder.

Splunk log in the client machine shows this error.
07-14-2016 00:36:47.562 -0400 ERROR FrameworkUtils - Incorrect path to script: C:\Program Files\SplunkUniversalForwarder\Scripted_Inputs\bin\scripts\Invoke_ErrorDCN.bat. Script must be located inside $SPLUNK_HOME\bin\scripts.
07-14-2016 00:36:47.562 -0400 ERROR ExecProcessor - Ignoring: ""C:\Program Files\SplunkUniversalForwarder\Scripted_Inputs\bin\scripts\Invoke_ErrorDCN.bat""

Re: Distributing scripts using deployment server

meenuvn — Thu, 14 Jul 2016 15:58:30 GMT

Never mind..There was a small mistake..Corrected it and got it working. Thanks much.

Re: Distributing scripts using deployment server

agentguerry — Thu, 16 May 2019 19:29:21 GMT

I have this same issue. what was the fix?