Getting Data In

Data input script stop !

thkwon
Explorer

I am collecting logs every 5 seconds using a script.
However, script execution is suddenly stopped.
Why does the script stop? Is it a Splunk bug?
My version is 7.3.3.

Labels (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Tell us more about the script and how it is run.  Splunk does not run scripts every 5 seconds so how are you doing so?

Did your script log an error when it failed?  Did the process running the script log an error?  What else happened at the time the script stopped?

---
If this reply helps you, Karma would be appreciated.
0 Karma

thkwon
Explorer

This script uses APIs from other systems to get results.

0 Karma

thkwon
Explorer

Hello richgalloway 

Splunk can run scripts with crontab and second.

Error message is 
02-09-2021 09:24:19.099 +0900 ERROR ExecProcessor - message from "/home/splunk/splunk/bin/scripts/REALTIME.sh"

Error Message occurs whenever a script is executed.

Then at some point, the result of the script does not occur.

click disable to run the script again, enable must click.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

One way to test your script is: 

 

splunk cmd <path to your script>

 

 r. Ismo

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...