Getting Data In

Can not see the output of btool in windows

ddrillic
Ultra Champion

I run the following:

C:\opt\splunk\splunkforwarder\bin>splunk btool inputs list > ..\btool.text

And I get an empty file. Why?

Tags (4)
0 Karma
1 Solution

mdsnmss
SplunkTrust
SplunkTrust

I don't get results unless I run as admin. You should also specify the .exe.

C:\opt\splunk\splunkforwarder\bin\splunk.exe btool inputs list > ..\btool.text

View solution in original post

mdsnmss
SplunkTrust
SplunkTrust

I don't get results unless I run as admin. You should also specify the .exe.

C:\opt\splunk\splunkforwarder\bin\splunk.exe btool inputs list > ..\btool.text

mdsnmss
SplunkTrust
SplunkTrust

Unless you customized the install folder, it would be "C:\Program Files\SplunkUniversalForwarder\bin\splunk.exe" btool inputs list > C:\Users\user\Downloads\btool.text" by default on Windows.

ddrillic
Ultra Champion

Thank you @mdsnmss.

0 Karma

ddrillic
Ultra Champion

Interesting, my colleague also suggested to use .\splunk.exe list inputstatus instead. Which one is better?

We ended up using the Power Shell command interface.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...