topic Re: How to troubleshoot why a data input script inside an app is not running? in Getting Data In

How to troubleshoot why a data input script inside an app is not running?

joao_amorim — Wed, 13 Apr 2016 11:18:33 GMT

I have a script that I want to put inside the appName/bin dir inside a specific app.

Previously, the script was inside the splunkHome/bin and it works perfectly and in that app, I configured the inputs.conf and the default.meta accordingly to the script.

The problem is that when I moved the script from the splunkHome/bin dir to the appName/bin dir, I changed the inputs.conf and the default.meta again, but the script that previously gave me some results, now results don't appear.

I already saw this link:
http://docs.splunk.com/Documentation/Splunk/6.0.6/AdvancedDev/ScriptSetup

But it didn't help.

Anyone please.... Thanks

Re: How to troubleshoot why a data input script inside an app is not running?

MuS — Thu, 14 Apr 2016 00:08:08 GMT

Hi joao_amorim,

first, try to run the script manually in the new location:

 $SPLKUNK_HOME/bin/splunk cmd python $SPLUNK_HOME/etc/apps/YourAppName/bin/YourScript.py

assuming it's a python script.

If this shows no error but still does not work, add some logging functions to your script - see the docs for more details about this http://docs.splunk.com/Documentation/Splunk/6.4.0/AdvancedDev/ModInputsLog
Don't be confused that this link talks about modular inputs; the method of logging is the same for scripted or modular input.

Hope this helps ...

cheers, MuS

Re: How to troubleshoot why a data input script inside an app is not running?

joao_amorim — Thu, 14 Apr 2016 08:59:26 GMT

Ok i will try that.

Actually my script is a .ksh so i will try and then i will let you know.

Thanks

Re: How to troubleshoot why a data input script inside an app is not running?

joao_amorim — Thu, 14 Apr 2016 10:27:01 GMT

@MuS do you know how to run a .ksh script in splunk?? Because I don't figure it out and already tried a lot of possibilities but no luck at all.

Best regards