I created a script input to collect data from scripts installed on forwarders and Splunk is not indexing.
Follow my steps to create a data input:
1.Forwarded inputs » Data inputs » Script » Add new
2.Create a server class.
Script Path: $SPLUNK_HOME\bin\scripts
disabled = false
index = rois
interval = 60.0
sourcetype = rois
Whats wrong with my input?
Please make sure that you have properly configured your deployment server and set up forwarder management in your implementation:
Hope it helps. Thanks!
View solution in original post
My script was wrong, Now Its work!