Getting Data In

How to import text file results of a powershell script when app is opened?

Path Finder

I have a powershell script that outputs a text file. What I want to do is have that powershell script run once a day and splunk to ingest the text file that has been generated by that powershell script whenever my app is opened. What is the most efficient way to do this?

I have toyed with a couple different ideas:

  • Put the powershell script on the forwarder, configuring it to run once a day, and configure splunk to monitor the directory where that file is output
  • Configure splunk to monitor a batch file that runs the powershell script (I don't think this will actually grab the text file that is generated)
0 Karma
1 Solution

Path Finder

As on my other post relating to this issue, there is a process for using scripts. The best way I found was to place them in the splunk bin, rather than the app bin. I decided to just take the stdout from the script, rather than use the text file. With that said, if you still wanted to use the text file, follow the procedure for running the script that outputs the file, then have splunk monitor the output file.

View solution in original post

0 Karma

Path Finder

As on my other post relating to this issue, there is a process for using scripts. The best way I found was to place them in the splunk bin, rather than the app bin. I decided to just take the stdout from the script, rather than use the text file. With that said, if you still wanted to use the text file, follow the procedure for running the script that outputs the file, then have splunk monitor the output file.

View solution in original post

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!