All Apps and Add-ons

NGINX status API input - no data

jaxjohnny2000
Builder

Good day!

Below is the inputs.conf file created by the Data Inputs. I see the text /nginx_status in the access.log from the monitor inputs. However, we are not getting any NGINX status API input data. Could this nginx_status stanza need some improvement?

[nginx_status://nginx_status]
loglevel = INFO
start_by_shell = false
sourcetype = nginx:plus:api
host_name=http://127.0.0.1/nginx_status
interval = 60
disabled = 0
index = web_services

0 Karma

jaxjohnny2000
Builder

08-28-2019 19:13:38.814 +0000 INFO SpecFiles - Found external scheme definition for stanza "nginx_status://" with 2 parameters: loglevel, host_name
08-28-2019 19:13:38.917 +0000 ERROR ModularInputs - Introspecting scheme=nginx_status: script running failed (exited with code 1).
08-28-2019 19:13:38.917 +0000 ERROR ModularInputs - Unable to initialize modular input "nginx_status" defined inside the app "Splunk_TA_nginx": Introspecting scheme=nginx_status: script running failed (exited with code 1).

0 Karma

twinspop
Influencer

I see the same. It sure seems like the API input will require a full Splunk install since it requires python.

0 Karma
Get Updates on the Splunk Community!

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...