All Apps and Add-ons

Did I format my Splunk Input.conf file for bamboo correctly?

nehannaidu
Engager

I have edited edited Input.conf file as below.

[Bamboo://localhost:8085]
sourcetype = bamboo
interval = 60
server = http://localhost:8085
protocol = https
port = 8085
username = bamboo_user
password = bamboo_pwd
disabled = 0

Is above file is correct?

Based on this HTTP event collector will generate the token in Splunk web enterprise right?

 

 

 

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The btool command will tell you if the file complies with the specs. 

splunk btool check

Correctness, however, is harder to define without knowing more about any add-ons these settings are for.  For example, should the port number be in the server attribute if it's also specified separately?  Protocol is "https", but the server value uses http.  This may or may not be a problem.

The stanza will not, however, generate a HEC token.  You should use the GUI (Settings->Data inputs->HTTP Event Collector) to generate a token and then put it into an [http://<<name>>] stanza in inputs.conf.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...