topic Re: Execute a command through the CLI on a remote system in Getting Data In

Execute a command through the CLI on a remote system

eden881 — Wed, 20 Nov 2019 13:09:17 GMT

When I run splunk cmd, I can execute any external system command using Splunk's context.
I want to combine that with the -uri parameter to be able to send remote commands to Universal Forwarders.

However the cmd engine treats -uri as a part of the command itself, for example:

splunk cmd dir -uri https://uf_hostname:8089
dir: cannot access https\://uf_hostname\:8089: No such file or directory

How can I send the command to a remote Splunk instance?

Re: Execute a command through the CLI on a remote system

richgalloway — Wed, 20 Nov 2019 16:29:45 GMT

Create an app with a scripted input containing that command. Push the app to the desired UFs.

Re: Execute a command through the CLI on a remote system

eden881 — Thu, 21 Nov 2019 08:26:19 GMT

Thank you for the answer, but this method is extremely inconvenient as it requires a lot of effort and time to issue a single command.
I'm looking for a semi-interactive way to make use of my existing Splunk deployment to perform simple management tasks in my environment, without the need to fully connect to the server.

Re: Execute a command through the CLI on a remote system

anfis — Wed, 29 Apr 2020 18:51:24 GMT

Hi, you might want to look at clustershell for this functionality. It's a little tricky to configure but runs nicely on all kind of lx clusters
see https://clustershell.readthedocs.io/en/latest/ for details and sources...

Re: Execute a command through the CLI on a remote system

eden881 — Thu, 30 Apr 2020 11:49:38 GMT

Thank you for the answer! Unfortunately I was looking for a way to achieve this via Splunk's components only, as those are already deployed on our servers.