- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I created a script input to collect data from scripts installed on forwarders and Splunk is not indexing.
Follow my steps to create a data input:
1.Forwarded inputs » Data inputs » Script » Add new
2.Create a server class.
3.
Script Path: $SPLUNK_HOME\bin\scripts
Command: $SPLUNK_HOME\bin\scripts\script.ps1
Interval: 60.0
Inputs.conf
[script://$SPLUNK_HOME/etc/apps/_server_app_rois/bin/script.ps1]
disabled = false
index = rois
interval = 60.0
sourcetype = rois
Whats wrong with my input?
Best regards,
Lopes.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Hi monteirolopes,
Please make sure that you have properly configured your deployment server and set up forwarder management in your implementation:
- On the deployment server, add one or more apps in SPLUNK_HOME/etc/deployment-apps
- In the Forwarder Management UI, create one or more server classes
- On forwarders, run splunk set deploy-poll Where port is the splunkd port on the deployment server - 8089 is the default
- Verify on deployment server:
- List of clients phoning home
- Deployment status
- Verify on forwarders: etc/apps folder for deployed apps
Hope it helps. Thanks!
Hunter Shen
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Hi monteirolopes,
Please make sure that you have properly configured your deployment server and set up forwarder management in your implementation:
- On the deployment server, add one or more apps in SPLUNK_HOME/etc/deployment-apps
- In the Forwarder Management UI, create one or more server classes
- On forwarders, run splunk set deploy-poll Where port is the splunkd port on the deployment server - 8089 is the default
- Verify on deployment server:
- List of clients phoning home
- Deployment status
- Verify on forwarders: etc/apps folder for deployed apps
Hope it helps. Thanks!
Hunter Shen
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- On Deployment Server: E:\Program Files\Splunk\etc\deployment-apps_server_app_roi
- Server Class is created: roi
- I using Splunk Deployment - Basic
- Phone home: a few seconds ago
On forwarder:
C:\Program Files\SplunkUniversalForwarder\etc\apps_server_app_roi
Best regards,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
My script was wrong, Now Its work!
Thanks!
