Why is the Powershell Modular Input not scheduling the script to run?

Kendo213 — Wed, 02 May 2018 15:27:51 GMT

Here is my inputs.conf:

[powershell://checkdnsext]
script = . "$SplunkHome\etc\apps\test_infra_dnsext_inputs\bin\checkdnsext.ps1"
schedule = `0 */5 * ? * *`
sourcetype = test:powershell
index = test

Here is my Powershell located in /app/bin:

$ErrorActionPreference="SilentlyContinue"
$ipaddress = $(ipconfig | where {$_ -match 'IPv4.+\s(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})' } | out-null; $Matches[1])
$dnstest=Resolve-DnsName -Name google.com -server $ipaddress -QuickTimeout -Type A | select Name
if ($dnstest -like '*google*') {
$result="1"
write-host ((get-date),"`nExternal DNS Status:","$result")
}
else{
$result="0"
write-host ((get-date),"`nExternal DNS Status:","$result")
}

The script works. I don't see any errors in splunkd.log on the client, other than the fact that I don't see it scheduling the script to run.

Any ideas?

Re: Why is the Powershell Modular Input not scheduling the script to run?

ansif — Thu, 03 May 2018 09:21:48 GMT

Can you try with a service restart.

Re: Why is the Powershell Modular Input not scheduling the script to run?

Kendo213 — Thu, 03 May 2018 13:39:27 GMT

I've tried restarting the service numerous times. That cron has 's around it because of the Splunk forum. It doesn't complain about an invalid cron in the internal logs.

topic Why is the Powershell Modular Input not scheduling the script to run? in Getting Data In

Why is the Powershell Modular Input not scheduling the script to run?

Re: Why is the Powershell Modular Input not scheduling the script to run?

Re: Why is the Powershell Modular Input not scheduling the script to run?