I want Splunk to run my script when the server starts & stops. Of course I can write a custom shell script to launch Splunk & do that by hand, but is there a way to have my App run on startup?
You could create a modular input using the python SDK. It is not really hard. Here is a basic example: https://github.com/kospol/splunk_simplePythonModularInput
Then your script can just be an app inside splunk.
Thanks, this was helpful. But really what I'm looking for is way to execute something from an "appserver" app. I have a bunch of views which need to be changed by a python script when I do a splunk restartss
If you are on *nix, then you might be able to edit /etc/init.d/splunk
I suspect if you run 'splunk enable boot-start' you will overwrite your changes though. But in there you could add your script to the splunk_start(), and splunk_restart()