Hi,
I need inputs from a timely scheduled script from a remote server.
Can I configure this script on deployment server, placing the script in $SPLUNK_HOME$/deploymentapps/<app_name>/bin/ & the respective inputs, props, and other conf files in $SPLUNK_HOME$/deploymentapps/<app_name>/local/ . Then push these settings to respective hosts with Splunk universal forawrders installed
Hi,
I know this thread has been quite sometimes but I'd like to share my answers in case it'd help others.
I've had success settings up scripted input running at an interval (in seconds) for UF v6.2.1 which is pretty simple:
Example
for script placement
..//bin/scripts/massage.sh
for inputs.conf configuration
[script://./bin/scripts/massage.sh]
sourcetype = mysourcetype
index = myindex
interval = 60.0
disabled = false
Make sure you placed above configs in your deployment server and perform deploy-server to push this to your HF.
This is with assumptions you've correctly setup the UF deploymentclients.conf, the outputs.conf and other neccessary setup accroding to your existing splunk architectural layout.
Possible. You can push Apps/TA (e.g. Windows Infra App, *nix app) which can have scripts using deployment server.