How to externally trigger a universal forwarder to send data to an indexer using PowerShell modular input

[williamcharlton]

I have server "X" on which is installed a universal forwarder.

Typically, I'd use the universal forwarder's cron functionality to trigger the execution of a PowerShell script. The PowerShell script will have been implemented using PowerShell modular input to send the data to an indexer, i.e., the script emits a stream of .NET objects and Splunk does the right thing with them.

Now, I have a PowerShell script whose execution is triggered by an event external to the universal forwarder. This script will also emit a stream of .NET objects and I want to use PowerShell modular input to send data to an indexer.

How to externally trigger the universal forwarder to send data using PowerShell modular input to an indexer?

I would appreciate it if you'd provide locations of and examples of *.conf files

[williamcharlton]

I understand what powershell modular input is. I've successfully implemented many such inputs. You've spent too time trying to "come up with the easiest answer" and not enough time reading the original question or asking questions to better understand my scenario and what I'm trying to achieve. Just to finish this up, I'll assume the is no way that an external event of any kind can be used to trigger Splunk

[jkat54]

what are you talking about? "External event trigger splunk?"