Getting Data In

Disabling script entry using CLI

thkwon
Explorer

Hello

Can I disable the script input setting with CLI?

I'm waiting for your answer.script.PNG

Labels (1)
0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @thkwon 

Login to host where Splunk is running and navigate to in Linux - /opt/splunk/etc/apps/search/local

open the inputs.conf and find your script entry add disabled=1 and make sure the splunk is restarted to effect the change.

For example.

[script://./bin/update_projects.sh]
index = _internal
interval = 3600
sourcetype = test:srctype
disabled = 1

--------------------------

If this reply helps Appreciate your upvote/like!

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar - Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...