what is modular input? and how to test an add-on with modular input?

[surbhiQA]

what is modular input? and how to test an add-on with modular input?

[deepashri_123 · Accepted solution]

Hey surbhiQA,

Modular inputs enable you to add new types of inputs to Splunk Enterprise, and have them treated as native Splunk Enterprise inputs.
Your users interactively create and update your custom inputs using Splunk Web, just as they do for native inputs.

You can refer the following docs:
http://docs.splunk.com/Documentation/Splunk/7.0.2/AdvancedDev/ModInputsIntro
https://docs.splunk.com/Documentation/SplunkCloud/7.0.0/AdvancedDev/ModInputsBasicExample

Let me know if this helps!!

[deepashri_123]

@surbhiQA Please accept the answer that helped you , so that this can be used for future reference

[tiagofbmm]

Hi

A modular input is a script that you can ask splunk to run and grab the results.

You can make a simple test with a shell script like this:

Configure scripted data input in $SPLUNK_HOME/etc//default/inputs.conf. Use the local directory for the app to overwrite behavior defined in the default directory. Here is an example:

[script://$SPLUNK_HOME/etc/apps//bin/starter_script.sh]

Make sure your script has execute permissions there for the Splunk user.

[tiagofbmm]

Please let me know if the answer was useful for you. If it was, accept it and upvote. If not, give us more input so we can help you with that