topic Re: Scripted Input: Cannot open file from /myapp/local in Getting Data In

Scripted Input: Cannot open file from /myapp/local

vincenteous — Wed, 20 Aug 2014 09:40:30 GMT

Hello all,

I have a perl script which is located in /myapp/bin and a configuration file in /myapp/local. I have added a script stanza inside inputs.conf and the script seems to be successfully invoked except for one thing, the script displays an error on splunkd.log that tells my custom configuration file cannot be opened. I have tried using an absolute path to that file and the result is still the same. Can anyone tell me where did I go wrong?

Thanks in advance.

Re: Scripted Input: Cannot open file from /myapp/local

MuS — Wed, 20 Aug 2014 10:59:13 GMT

Hi vincenteous,

did you place this in /myapp/.. or in $SPLUNK_HOME/etc/apps/myapp/..
Have a look at the docs about scripted inputs where you also get some hints where to put config files.
Another point to mention here: enable debugging in your script and run it like this:

  $SPLUNK_HOME/bin/splunk cmd $SPLUNK_HOME/etc/apps/myapp/bin/yourscript

and see what happens.

cheers, MuS

Re: Scripted Input: Cannot open file from /myapp/local

vincenteous — Thu, 21 Aug 2014 14:53:53 GMT

I placed my files under the $SPLUNK_HOME/etc/apps/myapp/ directory. I suppose something is off in my script. Will try to debug it using that command. Thanks again, MuS.

Re: Scripted Input: Cannot open file from /myapp/local

slashnburn — Thu, 21 Aug 2014 19:26:02 GMT

I just struggled with this and I determined the best to accomplish this task is to include the scripts in the $SPLUNK_HOME/bin/scripts folder. Visibility and permissions become a real pain when placing the scripts in a custom app folder.