topic Re: How do you btool inputs.conf? in Getting Data In

How do you btool inputs.conf?

Mohsin123 — Tue, 26 Sep 2017 15:37:04 GMT

hi,
can you please tell me what is the right way to btool inputs.conf for a specific app context. I want to troubleshoot this error that is too much in my splunk search head messages notification : Received index from dleeted/missing/unconfigured indexes. I read previous blogs: it says your inputs.conf is sending data to an indx that doesnt exist

Re: How do you btool inputs.conf?

sbbadri — Tue, 26 Sep 2017 15:49:42 GMT

@shraddhamuduli

$SPLUNK_HOME$/bin/splunk btool inputs list --debug

Then find the stanza.

Below are the links which will be helpful to you,

https://www.splunk.com/blog/2012/10/02/tips-and-tricks-for-the-new-guy.html
https://docs.splunk.com/Documentation/Splunk/6.6.3/Troubleshooting/Usebtooltotroubleshootconfigurations

Re: How do you btool inputs.conf?

Mohsin123 — Tue, 26 Sep 2017 15:54:25 GMT

thanks . by uf , do u mean this path in our deployment server right ?
/opt/splunk/etc/deployment-apps/

Re: How do you btool inputs.conf?

sbbadri — Tue, 26 Sep 2017 16:03:40 GMT

I meant Universal Forwarder. /opt/splunk/splunkuniversalforwarder/bin