Getting Data In

Feed inputs as command line argument

the_scissor
Engager

Is it possible to provide inputs to Splunk through command line argument (similar to python for compiling)? Instead of providing the path of the file/directory in inputs.conf, can we provide an input to it using command line argument while running the Splunk binary?
So, if I'll have to search for a string, can I do something like : ./splunk cmd searchtest "string"

inventsekar
SplunkTrust
SplunkTrust

Yes, you can feed inputs using cmd line -
to add a feed of /var/log directory (all files under this directory) -

$SPLUNK_HOME/bin/splunk add monitor /var/log/ 

internally this command updates the inputs.conf file. editing/updating this config file directly will more options.

https://docs.splunk.com/Documentation/Splunk/6.6.1/Data/Configureyourinputs

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

the_scissor
Engager

Thanks, but that will actually write into the same inputs.conf file and Splunk will be taking inputs from that path. What I was actually asking is whether it is possible to provide an input as command line argument while running the Splunk or not? Like for Python when we compile a file we do $python filename, similarly, can we do something like $splunk filename?

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...