Deployment Architecture

Missing /sbin in PATH and troubleshoting *nix scripts not functioning

jhallman
Explorer

/sbin was not in the path so things like ifconfig used in *nix apps

$SPLUNK_HOME/etc/apps/unix/bin/interfaces.sh is not reporting throughpout data.

I tried Manager » Server controls Restart Splunk.

Will I have to restart the process itself to get it to recognize /sbin is now in the PATH?

Also, how can I more easily figure out when some *nix script is not working properly?

Thanks

Tags (1)
0 Karma

jhallman
Explorer

So each script calls common.sh

In common.sh we added

if [ $# -ge 1 -a "x$1" = "x--debug" ] ; then
        DEBUG=1
        TEE_DEST=`dirname $0`/debug--`basename $0`--`date | sed 's/ /_/g;s/:/-/g'`
else
        DEBUG=0
        TEE_DEST=/dev/null
fi
####Add this
    DEBUG=1
    TEE_DEST=`dirname $0`/debug--`basename $0`--`date | sed 's/ /_/g;s/:/-/g'`
####End Add

which created a debug file (for each script being run) and within
debug--interfaces.sh--* we saw ifconfig command not found.

We ultimately stopped/restarted the splunk service and the new PATH got picked up.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...