Where should I place temp files generated by my scripted input?

EatMoreChicken — Mon, 31 Jan 2022 19:50:53 GMT

I made a custom TA in "/opt/splunk/etc/apps/myTA/". I created a script called "myTA/bin/scripts/pulldata.sh". My script makes temp files and it attempts to save in "myTA/bin/scripts/", but it has errors writing to that path. I can run the script in CLI using "./pulldata.sh" as the splunk user and it is fine to write the temp files to the "scripts" directory. I tried to use "/opt/splunk/bin/splunk cmd /opt/splunk/etc/apps/myTA/scripts/pulldata.sh", but that also has issues writing the temp files. I'm assuming that Splunk only lets the scripts write files in specific directories.

Is there a specific/correct location that I should be placing these temp files? I'm thinking I can write to "/opt/splunk/var/log/splunk", but I want to see what the Splunk recommended path if for this kind of stuff . I remember seeing information about this at some point on dev.splunk.com, but can't seem to find it anymore.

This is what I have been looking at: https://dev.splunk.com/enterprise/docs/developapps/createapps/appanatomy/

Thanks in advance!

Re: Where should I place temp files generated by my scripted input?

tshah-splunk — Wed, 02 Feb 2022 04:01:38 GMT

Hey @EatMoreChicken,

I believe this would help you understand placing the outputs in a detailed manner - https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/custominputs/scriptedinputsexample/#Example-file-structure-for-a-scripted-input

Re: Where should I place temp files generated by my scripted input?

EatMoreChicken — Fri, 11 Feb 2022 20:00:36 GMT

Perfect, this is exactly what I was looking for!

topic Where should I place temp files generated by my scripted input? in Getting Data In

Where should I place temp files generated by my scripted input?

Re: Where should I place temp files generated by my scripted input?

Re: Where should I place temp files generated by my scripted input?