Getting Data In

Any solid example of a scripted input on Windows?

maverick
Splunk Employee
Splunk Employee

..as in, I have a .cmd or a .bat file that I would like to use as a scripted input.

I am not able to find any solid examples of how the script:// stanza within my inputs.conf file looks like that actually works.

Anyone do this already that is willing to share their stanza?

0 Karma

ndoshi
Splunk Employee
Splunk Employee

The Splunk IP Watchlist app has a simple bat file to retrieve IP addresses and uses scripted input to call this bat file to gather the data. It's a simple approach as I'm not much of a DOS style script writer.

http://splunkbase.splunk.com/apps/All/4.x/app:Global+Threat+Landscape%7FIP+Watch+list+V2

0 Karma

ziegfried
Influencer

[script://$SPLUNK_HOME\etc\apps\myapp\bin\myscript.bat]
disabled = false
index = myindex
interval = 3600
sourcetype = mysourcetype

0 Karma

jflomenberg
Splunk Employee
Splunk Employee

Also note that if you are calling a python script you'll similarly want to make sure that path within it are set in a way that Windows can handle along the lines of
theFile = open(os.path.join(os.environ["SPLUNK_HOME"], 'etc', 'apps', 'bmon-eventgen', 'bin', 'sample', 'noise_apache.sample'),'r')

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...