https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-use-the-oneshot-command-in-a-bash-script/m-p/463217#M79950 <PRE><CODE>bash-4.1# cat test_script #!/bin/bash sudo -H -u splunk bash -c '/opt/splunk/bin/splunk add oneshot /opt/splunk/etc/system/local/log_dir/log_file* -index test -sourcetype test_log -auth admin:pass' </CODE></PRE> <P>This shell script is set to a cronjob. It works perfectly for the first couple of cron schedules, then stops working. When I try to run it manually, I get a “login failed” error. I believe this is due to security features on the server don’t like the plane text password.<BR /> Is it possible to disable login &amp; password authentication for the oneshot command so the shell script can execute? Otherwise, what other options do I have. Thanks for your help in advance.</P> <P>OS – REDHAT 6<BR /> SPLUNK VERSION – 7.0.1</P> Mon, 09 Dec 2019 13:34:04 GMT dajibade 2019-12-09T13:34:04Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-use-the-oneshot-command-in-a-bash-script/m-p/463217#M79950 <PRE><CODE>bash-4.1# cat test_script #!/bin/bash sudo -H -u splunk bash -c '/opt/splunk/bin/splunk add oneshot /opt/splunk/etc/system/local/log_dir/log_file* -index test -sourcetype test_log -auth admin:pass' </CODE></PRE> <P>This shell script is set to a cronjob. It works perfectly for the first couple of cron schedules, then stops working. When I try to run it manually, I get a “login failed” error. I believe this is due to security features on the server don’t like the plane text password.<BR /> Is it possible to disable login &amp; password authentication for the oneshot command so the shell script can execute? Otherwise, what other options do I have. Thanks for your help in advance.</P> <P>OS – REDHAT 6<BR /> SPLUNK VERSION – 7.0.1</P> Mon, 09 Dec 2019 13:34:04 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-use-the-oneshot-command-in-a-bash-script/m-p/463217#M79950 dajibade 2019-12-09T13:34:04Z https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-use-the-oneshot-command-in-a-bash-script/m-p/463218#M79951 <P>why oneshot every time? cant you monitor the file path / directories with inputs.conf? <BR /> also, looks like you are trying to check changes in your <CODE>.../etc/system/local/...</CODE> files to monitor changes.<BR /> there are easier ways to do so, for example: use <CODE>| rest ...</CODE> commands to bring the relevant results, put them in a summary index and check changes, copy the structure of folders to another place, for example: <CODE>/tmp</CODE> and run <CODE>diff</CODE> command and send output to splunk via scripted input, etc ...</P> <P>hope it helps</P> Tue, 10 Dec 2019 20:46:14 GMT https://community.splunk.com/t5/Getting-Data-In/Is-it-possible-to-use-the-oneshot-command-in-a-bash-script/m-p/463218#M79951 adonio 2019-12-10T20:46:14Z