topic Remove path from scripted input in Getting Data In

Remove path from scripted input

beaunewcomb — Fri, 03 Aug 2012 21:48:03 GMT

I setup a scripted input pointing to a .bat file which runs a curl request. But instead of only ingesting the output of the command that's run, splunk gets everything from the shell, including the current directory. How do I only get the output of the command, ignoring the actual command?

C:\WINDOWS\system32>C:\curl\curl.exe http://search.twitter.com/search.json?q=blah
----output of command is here----

Re: Remove path from scripted input

dwaddle — Sat, 04 Aug 2012 12:29:15 GMT

Splunk is ingesting exactly what your batch file writes to its standard output. So, your question really is one of the form "how do I make my batch file not echo every command?" There's a really old solution for that. Put a line with

@echo off

at the top of your batch file .. should make all the difference.

Re: Remove path from scripted input

beaunewcomb — Tue, 07 Aug 2012 15:36:54 GMT

Duh. 🙂

Thanks!!!