topic Re: Is there a way to run cmd btool check via rest? in Getting Data In

Is there a way to run cmd btool check via rest?

ddrillic — Thu, 25 Oct 2018 16:31:10 GMT

@harsmarvania57 suggested to use the lovely and useful ./splunk cmd btool check command In When modifying serverclass which safeguards could help us avoid the following mistakes?

Since most of our users use Jenkins to deploy their code, is there a way to run this command via rest?

Re: Is there a way to run cmd btool check via rest?

MuS — Fri, 26 Oct 2018 01:12:53 GMT

Hi ddrillic,

there might be something, because the old S.O.S app used it by using a custom command.

But why not use the https://splunkbase.splunk.com/app/1607/ that will provide shell access within Splunk where one can run btool for example.

Hope this helps ...

cheers, MuS

Re: Is there a way to run cmd btool check via rest?

wrangler2x — Fri, 26 Oct 2018 18:53:17 GMT

One thing you can't do with it is pipe to something else. This would normally show all the inputs.conf stanza names but in the app it just shows you usage info. Here on *nix:

$ splunk cmd btool inputs list --debug | grep "\["

/opt/splunk/etc/apps/unix/local/inputs.conf                            [script:///opt/splunk/etc/apps/unix/bin/ps.sh]
/opt/splunk/etc/apps/unix/local/inputs.conf                            [script:///opt/splunk/etc/apps/unix/bin/rlog.sh]
/opt/splunk/etc/apps/unix/local/inputs.conf                            [script:///opt/splunk/etc/apps/unix/bin/time.sh]
/opt/splunk/etc/apps/unix/local/inputs.conf                            [script:///opt/splunk/etc/apps/unix/bin/top.sh]

etc...

Re: Is there a way to run cmd btool check via rest?

MuS — Fri, 26 Oct 2018 20:45:13 GMT

Okay, S.O.S app had a custom command called btool in it https://answers.splunk.com/answers/104622/make-output-of-btool-some-conf-type-list-more-legible-unix.html#answer-432032 You can still download the app here https://splunkbase.splunk.com/app/748/#/overview Not sure though if you can use it to do btool check but well worth to give it a try 😉

cheers, MuS

Re: Is there a way to run cmd btool check via rest?

gjanders — Fri, 26 Oct 2018 22:22:32 GMT

Or refer to Btool Scripted Inputs for Splunk if you go down this particular path...

Re: Is there a way to run cmd btool check via rest?

ddrillic — Wed, 31 Oct 2018 20:20:49 GMT

Much appreciated @MuS

Re: Is there a way to run cmd btool check via rest?

ddrillic — Wed, 31 Oct 2018 20:21:55 GMT

Thank you @gjanders

Re: Is there a way to run cmd btool check via rest?

ddrillic — Wed, 12 Jun 2019 14:57:21 GMT

@MuS, is there a way to restrict this app, to run only the btool command? with the Unix sudo command for example, we can restrict which commands can run...

Re: Is there a way to run cmd btool check via rest?

MuS — Wed, 12 Jun 2019 20:17:44 GMT

Which one are you referring @ddrillic ? If it is this one https://splunkbase.splunk.com/app/1607/ then it is just a python script which can be modified so it only runs btool for example.

cheers, MuS

Re: Is there a way to run cmd btool check via rest?

ddrillic — Wed, 12 Jun 2019 20:31:49 GMT

Very interesting @MuS.

Re: Is there a way to run cmd btool check via rest?

gabriel_vasseur — Thu, 18 Aug 2022 10:44:10 GMT

I don't think https://splunkbase.splunk.com/app/1607/ has any chance of being installed in splunk cloud.

Someone at splunk suggested we try https://splunkbase.splunk.com/app/6368/ which we had no trouble getting installed in cloud and it's working for us.