Getting Data In

Disabling script entry using CLI

thkwon
Explorer

Hello

Can I disable the script input setting with CLI?

I'm waiting for your answer.script.PNG

Labels (1)
0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @thkwon 

Login to host where Splunk is running and navigate to in Linux - /opt/splunk/etc/apps/search/local

open the inputs.conf and find your script entry add disabled=1 and make sure the splunk is restarted to effect the change.

For example.

[script://./bin/update_projects.sh]
index = _internal
interval = 3600
sourcetype = test:srctype
disabled = 1

--------------------------

If this reply helps Appreciate your upvote/like!

0 Karma
Get Updates on the Splunk Community!

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...

Introducing Ingest Actions: Filter, Mask, Route, Repeat

WATCH NOW Ingest Actions (IA) is the best new way to easily filter, mask and route your data in Splunk® ...