Getting Data In

How to use inputs.conf or a setup page that will enable users to change the default monitoring port?

gaurav_maniar
Builder

My app is monitoring a default port for events. I want the user to be able to change this default port as per the system.
Example, [udp://123]. On the setup page, if the user provides any other port number, I want this '123' port to change to the user defined port. I checked the examples, they are about changing the parameter of fields for the defined input stanza but not the input.

Is there any way I can do this with setup page? or else I can create new entry in inputs.conf with the user defined port?

Thanks.

0 Karma

jcrabb_splunk
Splunk Employee
Splunk Employee

I am not sure if this is exactly what you mean, but one can add/remove inputs in the gui:

http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports

...or via CLI cmd:

http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports#Add_a_network_input_usin...

  • Example:

    ./splunk add udp 514 -sourcetype syslog
    

    Or as you mentioned, you can edit your existing inputs.conf to remove the old input stanza and add a new one:

http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports#Add_a_network_input_usin...

You can also manage those configuration files through a Deployment Server. If you have an app, as mentioned, where those settings are configured, you can Deploy a new version of that app to the relevant host with the new inputs:

http://docs.splunk.com/Documentation/Splunk/6.5.3/Updating/Aboutdeploymentserver

It just depends on the environment but that gives you a range of options.

Jacob
Sr. Technical Support Engineer
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...

Transform your security operations with Splunk Enterprise Security

Hi Splunk Community, Splunk Platform has set a great foundation for your security operations. With the ...

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...