topic Re: Feed inputs as command line argument in Getting Data In

Feed inputs as command line argument

the_scissor — Fri, 09 Jun 2017 00:09:49 GMT

Is it possible to provide inputs to Splunk through command line argument (similar to python for compiling)? Instead of providing the path of the file/directory in inputs.conf, can we provide an input to it using command line argument while running the Splunk binary?
So, if I'll have to search for a string, can I do something like : ./splunk cmd searchtest "string"

Re: Feed inputs as command line argument

inventsekar — Fri, 09 Jun 2017 03:54:44 GMT

Yes, you can feed inputs using cmd line -
to add a feed of /var/log directory (all files under this directory) -

$SPLUNK_HOME/bin/splunk add monitor /var/log/

internally this command updates the inputs.conf file. editing/updating this config file directly will more options.

https://docs.splunk.com/Documentation/Splunk/6.6.1/Data/Configureyourinputs

Re: Feed inputs as command line argument

the_scissor — Fri, 09 Jun 2017 16:48:53 GMT

Thanks, but that will actually write into the same inputs.conf file and Splunk will be taking inputs from that path. What I was actually asking is whether it is possible to provide an input as command line argument while running the Splunk or not? Like for Python when we compile a file we do $python filename, similarly, can we do something like $splunk filename?