All Apps and Add-ons

dbx is filling up the splunkd.log

hartfoml
Motivator

I instated the new db connect over the old one.

I have this line in the dbx inputs.conf

[script://$SPLUNK_HOME\etc\apps\dbx\bin\jbridge_server.py]
disabled = 0

I changed disable = 1 to stop the jbridge scripted from filling up the splunkd.log but it is still running. How can I stop this .py without restarting splunkd

07-15-2013 15:47:25.064 -0500 INFO ExecProcessor - Ran script: python /opt/splunkf/splunk/etc/apps/dbx/bin/jbridge_server.py, took 222.6 milliseconds to run, 0 bytes read, exited with code 1
07-15-2013 15:47:25.264 -0500 INFO ExecProcessor - Ran script: python /opt/splunkf/splunk/etc/apps/dbx/bin/jbridge_server.py, took 198.6 milliseconds to run, 0 bytes read, exited with code 1
07-15-2013 15:47:25.496 -0500 INFO ExecProcessor - Ran script: python /opt/splunkf/splunk/etc/apps/dbx/bin/jbridge_server.py, took 230.4 milliseconds to run, 0 bytes read, exited with code 1
07-15-2013 15:47:25.718 -0500 INFO ExecProcessor - Ran script: python /opt/splunkf/splunk/etc/apps/dbx/bin/jbridge_server.py, took 220.9 milliseconds to run, 0 bytes read, exited with code 1
07-15-2013 15:47:25.941 -0500 INFO ExecProcessor - Ran script: python /opt/splunkf/splunk/etc/apps/dbx/bin/jbridge_server.py, took 221.7 milliseconds to run, 0 bytes read, exited with code 1

Tags (1)
0 Karma
1 Solution

grijhwani
Motivator

For the most part Splunk only reloads configs on a restart. Tat said, if you can reach it as an application configuration through the GUI you might have more luck in disabling it and persuading it to stop. Just speculation, mind. Failing that you will just have to bite the bullet and restart. Unless you have logs coming in over UDP somehow (Splunk native syslog server?) it shouldn't cause too much of a problem just bouncing Splunk.

View solution in original post

0 Karma

grijhwani
Motivator

For the most part Splunk only reloads configs on a restart. Tat said, if you can reach it as an application configuration through the GUI you might have more luck in disabling it and persuading it to stop. Just speculation, mind. Failing that you will just have to bite the bullet and restart. Unless you have logs coming in over UDP somehow (Splunk native syslog server?) it shouldn't cause too much of a problem just bouncing Splunk.

0 Karma

hartfoml
Motivator

Thanks I tried the GUI first. The GUI did not update the congif file so I tried that second. the system is monitored for down time and I am not allowed to take it off line without notifying the system owner.

Thanks for the suggestions.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...