All Apps and Add-ons

Why doesn't splencore.sh with clean up doesn't work in Cisco eStreamer eNcore Add-on for Splunk?

lakshman239
Influencer

The TA has bin/splencore.sh which runs every 15mins to look for files older than 12 hours and removes them. This relies on the base path to be setup correctly. However, it wasn't setup correctly as per the install. I had to update SPLUNK_HOME in the script to correct path. basepath="$SPLUNK_HOME/etc/apps/TA-eStreamer/bin/encore/

Even then it doesn't seem to clean the old files. However, manually running the script cleans the files. Is this a known issue?

0 Karma

p_gurav
Champion
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...