I created the inputs.conf for ping but get an error about the format when splunk starts. I am using the format
[ping://192.168.0.62]
hosts = 192.168.0.62
interval = 30s
runs = 1
It fails on the hosts line.
Change "hosts" to "dest" and it will likely work. See the spec file here: https://github.com/LukeMurphey/splunk-network-tools/blob/master/src/README/inputs.conf.spec
Im Very new to Splunk and I have download the Network toolkit app and have uploaded it but its is not pulling any data. What else do I need to do for it to work? Do I need to add ithems into a .conf file and if is where at? Depolyment server and our two index servers or only the deployment server? What would I add in that .conf file? or is it already done since I uploaded the app?
Change "hosts" to "dest" and it will likely work. See the spec file here: https://github.com/LukeMurphey/splunk-network-tools/blob/master/src/README/inputs.conf.spec
Thank you for the fast reply, that seemed to clear the error. I am still not seeing the results on the ping dashboard. I am guessing I am missing another step or 3. Other than adding the inputs.conf to etc\apps\network_tools\local are there other setups that need to be done?
Do you see any log messages that may be indicating why it isn't working? See https://lukemurphey.net/projects/splunk-website-monitoring/wiki/Troubleshooting from some troubleshooting steps.
Note that you need a heavy forwarder for the inputs to work (if you are running this on a forwarder).