topic Re: What actually happens when someone presses the "Disable" button on the page of a modular input? in Getting Data In

What actually happens when someone presses the "Disable" button on the page of a modular input?

akorzun — Mon, 11 May 2015 12:44:16 GMT

Hello,

I am writing a modular input in Java. What actually happens when someone presses the "Disable" button on the page of a modular input? Does Splunk just kill Java process? If it doesn't then how can I catch the close signal in Java? I want to write the graceful shutdown.

Thanks.

Re: What actually happens when someone presses the "Disable" button on the page of a modular input?

rsennett_splunk — Mon, 11 May 2015 18:24:11 GMT

When someone fills in the bits for your modular input, it creates an entry in inputs.conf. Disable is to disable that stanza in inputs.conf
So, it doesn't interrupt the current "grab" it will just not get data on the next interval and beyond...

Re: What actually happens when someone presses the "Disable" button on the page of a modular input?

akorzun — Tue, 12 May 2015 09:42:40 GMT

Thank you for the answer. I have one more question. What happens with an active modular input when Splunk is stopped?