Getting Data In

How to use inputs.conf or a setup page that will enable users to change the default monitoring port?

gaurav_maniar
Builder

My app is monitoring a default port for events. I want the user to be able to change this default port as per the system.
Example, [udp://123]. On the setup page, if the user provides any other port number, I want this '123' port to change to the user defined port. I checked the examples, they are about changing the parameter of fields for the defined input stanza but not the input.

Is there any way I can do this with setup page? or else I can create new entry in inputs.conf with the user defined port?

Thanks.

0 Karma

jcrabb_splunk
Splunk Employee
Splunk Employee

I am not sure if this is exactly what you mean, but one can add/remove inputs in the gui:

http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports

...or via CLI cmd:

http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports#Add_a_network_input_usin...

  • Example:

    ./splunk add udp 514 -sourcetype syslog
    

    Or as you mentioned, you can edit your existing inputs.conf to remove the old input stanza and add a new one:

http://docs.splunk.com/Documentation/Splunk/latest/Data/Monitornetworkports#Add_a_network_input_usin...

You can also manage those configuration files through a Deployment Server. If you have an app, as mentioned, where those settings are configured, you can Deploy a new version of that app to the relevant host with the new inputs:

http://docs.splunk.com/Documentation/Splunk/6.5.3/Updating/Aboutdeploymentserver

It just depends on the environment but that gives you a range of options.

Jacob
Sr. Technical Support Engineer
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...