topic Re: Correct Location for Splunk Input Scripts and troubleshooting in Getting Data In

Correct Location for Splunk Input Scripts and troubleshooting

cmontonen — Tue, 26 May 2015 11:13:55 GMT

Hello all,
I am testing Splunk's ability to use scripted output as a datasource and I am following this sequence of tutorials
http://docs.splunk.com/Documentation/Splunk/6.2.3/Data/Setupcustominputs .
I have created a top.sh dummy script (on OS X) following the example at the bottom of the document above, but unfortunately I cannot see any of the input from top.sh in Splunk.
I've made sure to chmod the appropriate exec permissions to top.sh and it also works when I run it as a standalone script.
Splunk logs tell me:

05-26-2015 12:00:13.242 +0100 ERROR FrameworkUtils - Incorrect path to script: /opt/splunk/etc/apps/scripts/bin/top.sh.  Script must be located inside $SPLUNK_HOME/bin/scripts.
05-26-2015 12:00:13.242 +0100 ERROR ExecProcessor - Ignoring: "/opt/splunk/etc/apps/scripts/bin/top.sh"

I've tried placing the script into the suggested directory, but this does not seem to make a difference.
Can anyone give me some advice on how to troubleshoot this situation?

Re: Correct Location for Splunk Input Scripts and troubleshooting

Yasaswy — Tue, 26 May 2015 14:37:01 GMT

Hi,
If you are planning to run scripts in "app" context the correct path would be:
$SPLUNK_HOME/etc/apps/$APPLICATION/bin/

Guessing from the error above, "scripts" is not recognized as an app. Does you install have a defined "scripts" app? If that's not the case, you will need to place your script in your bin directory:
/opt/splunk/bin/top.sh

If you have already placed the scripts here and it's still not working, can you provide the error you are seeing?

Re: Correct Location for Splunk Input Scripts and troubleshooting

woodcock — Tue, 26 May 2015 15:18:58 GMT

Put it in /opt/splunk/bin/scripts/.

Re: Correct Location for Splunk Input Scripts and troubleshooting

sloshburch — Tue, 22 Jan 2019 21:10:45 GMT

A full answer is over at What are best practices for referencing a scripted input from another app?

Re: Correct Location for Splunk Input Scripts and troubleshooting

Jarohnimo — Thu, 01 Apr 2021 11:39:41 GMT

Hi @woodcock do the scripts you place in the

opt/splunk/bin/scripts Directory remain persistent after an upgrade?

Can you point me to documentation that explains?

Thanks