Deployment Architecture

Missing /sbin in PATH and troubleshoting *nix scripts not functioning

jhallman
Explorer

/sbin was not in the path so things like ifconfig used in *nix apps

$SPLUNK_HOME/etc/apps/unix/bin/interfaces.sh is not reporting throughpout data.

I tried Manager » Server controls Restart Splunk.

Will I have to restart the process itself to get it to recognize /sbin is now in the PATH?

Also, how can I more easily figure out when some *nix script is not working properly?

Thanks

Tags (1)
0 Karma

jhallman
Explorer

So each script calls common.sh

In common.sh we added

if [ $# -ge 1 -a "x$1" = "x--debug" ] ; then
        DEBUG=1
        TEE_DEST=`dirname $0`/debug--`basename $0`--`date | sed 's/ /_/g;s/:/-/g'`
else
        DEBUG=0
        TEE_DEST=/dev/null
fi
####Add this
    DEBUG=1
    TEE_DEST=`dirname $0`/debug--`basename $0`--`date | sed 's/ /_/g;s/:/-/g'`
####End Add

which created a debug file (for each script being run) and within
debug--interfaces.sh--* we saw ifconfig command not found.

We ultimately stopped/restarted the splunk service and the new PATH got picked up.

0 Karma
Get Updates on the Splunk Community!

Index This | When is October more than just the tenth month?

October 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What’s New & Next in Splunk SOAR

 Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us for an ...