topic Re: Why does Splunk only run my PowerShell script once after reloading the deployment server? in Deployment Architecture

Why does Splunk only run my PowerShell script once after reloading the deployment server?

wstefanczyk — Tue, 03 Nov 2015 13:24:14 GMT

I'm a new Splunk user.

I created a new Powershell script and i don't know why Splunk runs it only once after reloading the Deployment Server

My input file:

[powershell://dq]
script = . "$SplunkHome\etc\apps\wins_inputs\local\dq.ps1"
source = dq
sourcetype = Powershell:dq
interval = 10
index = powershell

Powershell script:
dq.ps1

$computer         = $ENV:Computername
$instance         = "_total"

@("\\$Computer\PhysicalDisk(*)\Current Disk Queue Length",
  "\\$Computer\PhysicalDisk(*)\Avg. Disk Queue Length",
  "\\$Computer\PhysicalDisk(*)\Avg. Disk Read Queue Length",
  "\\$Computer\PhysicalDisk(*)\Avg. Disk Write Queue Length") |% {
    (Get-Counter $_.replace("*",$instance)).CounterSamples } |
    Select-Object Path,CookedValue

Do you have any ideas why?

Re: Why does Splunk only run my PowerShell script once after reloading the deployment server?

wstefanczyk — Thu, 05 Nov 2015 13:50:30 GMT

I found resolutions

i used schedule not interval

Re: Why does Splunk only run my PowerShell script once after reloading the deployment server?

SudarshanChakra — Fri, 28 Jul 2023 09:31:52 GMT

I have tried using both interval and schedule but the script only runs on splunk restart or after reloading the deployment server. Any suggestions ?