All Apps and Add-ons

How does Splunk know which script to run for a modular input?

wegscd
Contributor

I'm writing my own modular input, using the docs, Python examples, SNMP TA, and the Splunk Add-on for ServiceNow as a learning base.

Looking at the Splunk Add-on for ServiceNow, there are a kajillion .py files in bin/. How does Splunk know that snow.py is the main for the modular input, instead of one of the other scripts?

mreynov_splunk
Splunk Employee
Splunk Employee
0 Karma

ehaddad_splunk
Splunk Employee
Splunk Employee

you can go to /README/inputs.conf.spec. There would be an entry such as:
[snow://]
snow.py would be the main starting point.

Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...