topic How to configure Splunk to to run my python script every time Splunk starts or restarts? in Splunk Dev

How to configure Splunk to to run my python script every time Splunk starts or restarts?

SIddharth5794 — Mon, 07 Sep 2015 10:00:13 GMT

I want to run a python script along with Splunk. It should start when Splunk starts and should restart when Splunk restarts. Is there a way of configuring this so that my python script can run every time Splunk starts?

Re: How to configure Splunk to to run my python script every time Splunk starts or restarts?

lcrielaa — Mon, 07 Sep 2015 10:16:58 GMT

If you're running Splunk on UNIX/Linux, you could edit the startup scripts in /etc/init.d/ to include your script in the start/restart section. Just be careful that if you ever do a "splunk enable boot-start", your changes will get overwritten.

You can also create a scripted input and set the interval to -1 as per the documentation : http://docs.splunk.com/Documentation/Splunk/6.2.5/Data/Setupcustominputs

For one-shot data streams, enter -1. Setting interval to -1 will cause the script to run each time the splunk daemon restarts.

Re: How to configure Splunk to to run my python script every time Splunk starts or restarts?

SIddharth5794 — Mon, 07 Sep 2015 10:44:02 GMT

I found this in init.d file

"The init scripts that used to reside in this directory are deprecated. Splunk
now includes the ability to update the system boot configuration on its own."

Re: How to configure Splunk to to run my python script every time Splunk starts or restarts?

lcrielaa — Mon, 07 Sep 2015 10:51:48 GMT

not /opt/splunk/etc/init.d/ but /etc/init.d/ of the actual server.

Re: How to configure Splunk to to run my python script every time Splunk starts or restarts?

SIddharth5794 — Mon, 07 Sep 2015 11:13:29 GMT

I don't want to run the script while splunk is not running. I just want to run it when splunk runs. So the running of the script has to be initiated according to the running of splunk.

Re: How to configure Splunk to to run my python script every time Splunk starts or restarts?

lcrielaa — Mon, 07 Sep 2015 11:18:41 GMT

Which exactly what I'm saying.

Either use the Splunk start/restart script in /etc/init.d/ and hook in your python script there. This will run your script when you start/restart Splunk.

Create a scripted input in Splunk and give it an interval of -1 so that it starts every time you start/restart Splunk. I recommend this option. See the documentation link I provided earlier.

Re: How to configure Splunk to to run my python script every time Splunk starts or restarts?

SIddharth5794 — Mon, 07 Sep 2015 11:23:17 GMT

Ohh.. Thanks! I will try it out.