All Apps and Add-ons
Highlighted

Where does the Splunk Add-on for Box store checkpoint information?

New Member

I recently install the add-on and it appears to be working fine. However, I'd like to understand more around how the app works. Can someone explain how the add-on stores checkpoint information and where it puts it on the file system?

I found the createdafter variable in the boxdefault section of box.conf, but it doesn't appear to have been changed since I installed the add-on. The python is a bit complicated but I see reference to a checkpointdir setting (which I don't see set anywhere, nor can I tell what it defaults to) as well as it functions that look like they use the restapi to save the checkpoint somewhere. But i don't see what rest endpoint it uses.

Can somebody help me figure it out?
Thanks!

Tags (1)
0 Karma
Highlighted

Re: Where does the Splunk Add-on for Box store checkpoint information?

Splunk Employee
Splunk Employee

Have you checked the documentation? http://docs.splunk.com/Documentation/AddOns/released/Box/Troubleshooting#Reset_checkpoint_for_histor... suggests that there is an events checkpoint file under $SPLUNKHOME/var/lib/splunk/modinputs/boxservice.

View solution in original post

0 Karma
Highlighted

Re: Where does the Splunk Add-on for Box store checkpoint information?

New Member

Totally missed that page. Thanks!

0 Karma