I've installed the application, rebooted Splunk, Configured Data Inputs. But nothing happened. My index is empty. There is no clue in log files under /opt/Splunk/var/logs/Splunk. How can I localize the cause of problem?
HI @kvaga,
You can troubleshoot Module Input by
REST API access
The Splunk platform provides REST endpoints to access modular inputs installed on a Splunk server. You can access the REST endpoint using the manager port of Splunk Web.
https://localhost:8089/services/data/modular-inputs
https://localhost:8089/services/data/modular-inputs/{name}
Print modular inputs configurations
Use the Splunk utility, print-modinput-config to print the XML configuration for a modular input. Here is how you call the command for a script named myscript.py with the specified stanza in inputs.conf
splunk cmd splunkd print-modinput-config myscheme mystanza
Please check following link for detailed information.
https://docs.splunk.com/Documentation/Splunk/7.1.1/AdvancedDev/ModInputsDevTools
Thanks
HI @kvaga,
You can troubleshoot Module Input by
REST API access
The Splunk platform provides REST endpoints to access modular inputs installed on a Splunk server. You can access the REST endpoint using the manager port of Splunk Web.
https://localhost:8089/services/data/modular-inputs
https://localhost:8089/services/data/modular-inputs/{name}
Print modular inputs configurations
Use the Splunk utility, print-modinput-config to print the XML configuration for a modular input. Here is how you call the command for a script named myscript.py with the specified stanza in inputs.conf
splunk cmd splunkd print-modinput-config myscheme mystanza
Please check following link for detailed information.
https://docs.splunk.com/Documentation/Splunk/7.1.1/AdvancedDev/ModInputsDevTools
Thanks