I am testing Splunk's ability to use scripted output as a datasource and I am following this sequence of tutorials
I have created a top.sh dummy script (on OS X) following the example at the bottom of the document above, but unfortunately I cannot see any of the input from top.sh in Splunk.
I've made sure to chmod the appropriate exec permissions to top.sh and it also works when I run it as a standalone script.
Splunk logs tell me:
05-26-2015 12:00:13.242 +0100 ERROR FrameworkUtils - Incorrect path to script: /opt/splunk/etc/apps/scripts/bin/top.sh. Script must be located inside $SPLUNK_HOME/bin/scripts. 05-26-2015 12:00:13.242 +0100 ERROR ExecProcessor - Ignoring: "/opt/splunk/etc/apps/scripts/bin/top.sh"
I've tried placing the script into the suggested directory, but this does not seem to make a difference.
Can anyone give me some advice on how to troubleshoot this situation?
If you are planning to run scripts in "app" context the correct path would be:
Guessing from the error above, "scripts" is not recognized as an app. Does you install have a defined "scripts" app? If that's not the case, you will need to place your script in your bin directory:
If you have already placed the scripts here and it's still not working, can you provide the error you are seeing?