Hi Team
I am getting a list of hosts and their corresponding ports in the indexed data and I want to keep checking whether the port is listening on that host using Splunk every say 3 min. How can I do this?
e.g. Data I am getting from indexing
HOST=abc.pqr.com,PORT=9001
HOST=11.11.11.11,PORT=9242
In Linux, I can check if a port is listening using standard telnet command. How can I do the same in Splunk?
I found the telnetstatus app, but the same is not considering a specific port. Any simple and direct app suggestions appreciated.
You need to write your own scripted input
(which I am sure is all that the telnetstatus
app is):
http://docs.splunk.com/Documentation/Splunk/6.4.1/AdvancedDev/ScriptedInputsIntro
http://docs.splunk.com/Documentation/Splunk/6.4.1/AdvancedDev/ScriptSetup