topic Re: Restarting Splunk Forwarders with Powershell in Getting Data In

Restarting Splunk Forwarders with Powershell

zacharyhatsis — Mon, 31 Dec 2012 21:32:56 GMT

Can anyone give me some insight into why this script might not be working? I'm fairly new to powershell, so i'm sure its somethign simple:

$serverlist =
"C:\Users\zh\Desktop\serverlist.txt"
Get-Content $serverlist |
foreach($comp in
$serverlist){Invoke-Command
-ComputerName $_ -FilePath "C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe"
-ArgumentList restart -verbose}

I tried using the splunk powershell kit, and didn't have a lot of luck getting the commands to work without debugging it, so I figured this shoudl be a simple one-liner on powershell to fix on my own rather than debugging the kit. Thanks!

Re: Restarting Splunk Forwarders with Powershell

zacharyhatsis — Mon, 31 Dec 2012 21:58:18 GMT

for some reason the backslashes get removed from this thread. they are all there for the directory names.

Re: Restarting Splunk Forwarders with Powershell

sbrant_splunk — Mon, 31 Dec 2012 22:10:47 GMT

FYI, you can either escape the slashes in your answer or highlight the "code" portion of your answer and click the "code sample" (1s and 0s) button on the formatting menu.

Re: Restarting Splunk Forwarders with Powershell

zacharyhatsis — Mon, 31 Dec 2012 22:35:00 GMT

$serverlist = "C:\Users\zh\Desktop\serverlist.txt" foreach ($server in Get-Content $serverlist) {Invoke-Command -ScriptBlock {"C:\program files\splunkuniversalforwarder\bin\splunk.exe restart"} -ComputerName $server -verbose}

Re: Restarting Splunk Forwarders with Powershell

bdlabs — Tue, 01 Jan 2013 15:44:00 GMT

Try "restart-service splunk*" instead of "-FilePath "C:Program FilesSplunkUniversalForwarderbinsplunk.exe"
-ArgumentList restart -verbose"