topic Re: Run scripted input on search peer (IDX) in Getting Data In

Is it possible to run scripted input on the search peer?

aa70627 — Fri, 20 May 2022 15:31:52 GMT

Is it possible to run scripted input on the search peer? Also, is it possible to ensure it runs from all search peers ? Thanks ahead of time.

Re: Run scripted input on search peer (IDX)

gcusello — Fri, 20 May 2022 14:58:38 GMT

Hi @aa70627,

which scripted input are you speaking for?

in other words, what do you want t otake with it? local or remote logs?

if local, there isn't any problem, you can distribute it to all indexers via Master Node and the logs are indexed on the same Indexer.

If you're speaking of remote logs, there's the problem that you probably you need only one execution of the script and not more than one.

Could you better describe your need?

Ciao.

Giuseppe

Re: Is it possible to run scripted input on the search peer?

aa70627 — Fri, 20 May 2022 20:37:43 GMT

My initial question was for the scripted input logs within local server. I wanted to run a script form each indexer and send the data to splunk. I was able to confirm it works the same as a scripted input on UF or SH.