My app is monitoring a default port for events. I want the user to be able to change this default port as per the system.
Example, [udp://123]. On the setup page, if the user provides any other port number, I want this '123' port to change to the user defined port. I checked the examples, they are about changing the parameter of fields for the defined input stanza but not the input.
Is there any way I can do this with setup page? or else I can create new entry in inputs.conf with the user defined port?
Thanks.
I am not sure if this is exactly what you mean, but one can add/remove inputs in the gui:
http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports
...or via CLI cmd:
Example:
./splunk add udp 514 -sourcetype syslog
Or as you mentioned, you can edit your existing inputs.conf to remove the old input stanza and add a new one:
You can also manage those configuration files through a Deployment Server. If you have an app, as mentioned, where those settings are configured, you can Deploy a new version of that app to the relevant host with the new inputs:
http://docs.splunk.com/Documentation/Splunk/6.5.3/Updating/Aboutdeploymentserver
It just depends on the environment but that gives you a range of options.