Can a universal forwarder run a script? If yes, is there a way to control when it runs?

[a212830]

Hi,

Can a UF run a script? If so, is there any way to control when it runs?

[sowings]

You can use a cron-like schedule in the "interval" field of the scripted input, see the docs at the link below.

http://docs.splunk.com/Documentation/Splunk/6.1.3/Admin/Inputsconf

[somesoni2]

YOu can configure a scripted input in UF, so yes it can run a script. And you can specify the interval it should run in the inputs.conf.
See this
http://docs.splunk.com/Documentation/Splunk/6.1.3/AdvancedDev/ScriptSetup

[unitedmarsupial]

8 years later, the link is broken 😞

[hettervik]

New working link that always point to latest version 🙂

https://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/ScriptSetup

[aruncse83]

Thank you, both these links helped me in achieving my desired output.