I'm a new Splunk user.
I created a new Powershell script and i don't know why Splunk runs it only once after reloading the Deployment Server
My input file:
[powershell://dq]
script = . "$SplunkHome\etc\apps\wins_inputs\local\dq.ps1"
source = dq
sourcetype = Powershell:dq
interval = 10
index = powershell
Powershell script:
dq.ps1
$computer = $ENV:Computername
$instance = "_total"
@("\\$Computer\PhysicalDisk(*)\Current Disk Queue Length",
"\\$Computer\PhysicalDisk(*)\Avg. Disk Queue Length",
"\\$Computer\PhysicalDisk(*)\Avg. Disk Read Queue Length",
"\\$Computer\PhysicalDisk(*)\Avg. Disk Write Queue Length") |% {
(Get-Counter $_.replace("*",$instance)).CounterSamples } |
Select-Object Path,CookedValue
Do you have any ideas why?
I found resolutions
i used schedule not interval
Hi
I have tried using both interval and schedule but the script only runs on splunk restart or after reloading the deployment server. Any suggestions ?