Getting Data In

How often do scripted inputs execute?

mburgess97
Path Finder

How often do scripted inputs execute?  I want to implement some of these for exchange, but concerned that they will continually execute and cause performance impact.

Scripted inputs

[script://.\bin\exchangepowershell.cmd v14 get-publicfolderstats_2010.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-databasestats_2010.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-folderstats_2010.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-distlists_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-hoststats_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 read-audit-logs_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 read-mailbox-audit-logs_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-mailboxstats_2010_2013.ps1]
[script://.\bin\exchangepowershell.cmd v14 get-inboxrules_2010_2013.ps1]

 

Link to TA

https://docs.splunk.com/Documentation/AddOns/released/MSExchange/TA-Mailboxinputs

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

Scripted inputs run as often as specified by the INTERVAL setting in inputs.conf.  If not specified, the script will run every minute.  See https://docs.splunk.com/Documentation/Splunk/9.0.4/Admin/Inputsconf#Scripted_Input::~:text=ignores%2...

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

Scripted inputs run as often as specified by the INTERVAL setting in inputs.conf.  If not specified, the script will run every minute.  See https://docs.splunk.com/Documentation/Splunk/9.0.4/Admin/Inputsconf#Scripted_Input::~:text=ignores%2...

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...