Disabling script entry using CLI

thkwon · ‎02-25-2021

Hello

Can I disable the script input setting with CLI?

I'm waiting for your answer.

venkatasri · ‎03-02-2021

Login to host where Splunk is running and navigate to in Linux - /opt/splunk/etc/apps/search/local

open the inputs.conf and find your script entry add disabled=1 and make sure the splunk is restarted to effect the change.

For example.

[script://./bin/update_projects.sh]
index = _internal
interval = 3600
sourcetype = test:srctype
disabled = 1

--------------------------

If this reply helps Appreciate your upvote/like!