https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181824#M36453 <P>Is there a way to set it up so all of the forwarders run the script?</P> Fri, 20 Mar 2015 17:24:12 GMT akelly4 2015-03-20T17:24:12Z https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181822#M36451 <P>I'm trying to setup Splunk so it pulls the IP, hostname, and original install date off of all servers that have the splunk forwarder installed.</P> <P>I have the command I need to run in order to pull this data systeminfo | findstr /i "Host original IP".</P> <P>It seems like it should be very simple to set this up just going to settings &gt; data inputs &gt; scripts</P> <P>Couple of questions. In order to get this to run via the command prompt or powershell how do I add the script in the $SPLUNK_HOME\bin\scripts folder?</P> <P>Is there anything special I need to take into consideration? I can't find much documentation on this so I was looking for any guidance to get this to work.</P> Fri, 20 Mar 2015 15:39:13 GMT https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181822#M36451 akelly4 2015-03-20T15:39:13Z https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181823#M36452 <P>Anything you put in $SPLUNK_HOME/bin/scripts runs on the local Splunk server, not on the forwarders.</P> Fri, 20 Mar 2015 17:23:48 GMT https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181823#M36452 richgalloway 2015-03-20T17:23:48Z https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181824#M36453 <P>Is there a way to set it up so all of the forwarders run the script?</P> Fri, 20 Mar 2015 17:24:12 GMT https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181824#M36453 akelly4 2015-03-20T17:24:12Z https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181825#M36454 <P>Is <A href="http://docs.splunk.com/Documentation/Splunk/6.2.2/AdvancedDev/ScriptedInputsIntro">this</A> the level of detail you are looking for? If you find anything essential missing from this documentation, please use the comment form at the bottom of each page to provide your feedback.</P> Fri, 20 Mar 2015 17:25:38 GMT https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181825#M36454 s2_splunk 2015-03-20T17:25:38Z https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181826#M36455 <P>The think the OP is looking to run a script on each monitored system and have the results reported by the Splunk Forwarder. I'm pretty sure he's going about it the wrong way, but don't know the right way. <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Fri, 20 Mar 2015 17:36:10 GMT https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181826#M36455 richgalloway 2015-03-20T17:36:10Z https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181827#M36456 <P>I think that's exactly how you would go about it.</P> <P>1) create a script that does what you need it to do and writes to stdout (account for platform specifics)<BR /> 2) package the script in an app as a scripted input, decide how often to run it<BR /> 3) deploy it to the forwarders (monitored systems) and watch the script results come back into the indexer(s) once the scripts execute</P> Fri, 20 Mar 2015 19:39:59 GMT https://community.splunk.com/t5/Getting-Data-In/Scripting-with-Splunk/m-p/181827#M36456 s2_splunk 2015-03-20T19:39:59Z