topic CLI reload scripted input in Getting Data In

CLI reload scripted input

EricPartington — Fri, 14 Oct 2011 13:02:00 GMT

I have a number of scripted inputs on my linux servers. How do I use the cli to reload that input to update configurations after a script or config has been modified?

./splunk _internal call ...?

I am restarting the entire splunk installation currently and would like to avoid that if possible.

The inputs are also contained inside an app, so if reloading an app is easier then a CLI command to disable and enable an app would also be useful.

Re: CLI reload scripted input

Ayn — Fri, 14 Oct 2011 13:29:34 GMT

Splunk is running the script as it is each time, so if you modify the script, the changes will take effect the next time Splunk runs it.

Re: CLI reload scripted input

EricPartington — Fri, 14 Oct 2011 13:33:54 GMT

Ok, i had edited the inputs.conf file to change the source value and that wasnt reflected in the output i was seeing on import into splunk.

Is there a way to enable or disable a particular input via CLI?
if disabled=0 for
[script:///app/splunk/etc/apps/lea-cma-o-international/bin/lea-loggrabber.sh]
how do i enable that particular input without using the GUI?

Re: CLI reload scripted input

Ayn — Fri, 14 Oct 2011 13:50:05 GMT

Have a look at the CLI command edit. $SPLUNK_HOME/bin/splunk help edit