Getting Data In

Is it Possible to Configure a cronjob with Scripted Input

JoshuaJJ
Path Finder

Hello, 

I have a bash script that basically creates a cronjob. Not sure if this is allowed or not but I am able to execute it just fine when logged into the splunkfwd account on the UF. However, when ExecProc tries to execute it gives me a permission denied.  (The below app is deployed via a Deployment Server)

Sample Script (something simple, trying to get it to work first before i build in my if/then statements) 

#!/bin/bash

# List the current user's crontab and save output to /tmp/cron_out
echo "* * * * * testing_this_out" | crontab - > /tmp/cron_out 2>&1

 

inputs.conf 

[script://./bin/install_cron.sh]
disabled = false
interval = 10   
sourcetype = cron_upgrader
index = splunk_upgrade

 

App Structure 

/opt/splunkforwarder/etc/apps/<app_name>/

...........bin > install_cron.sh 

...........local > inputs.conf  

Not sure, but I am pretty sure Splunk restricts what can be executed since if I manually execute the script, it works fine. 

Labels (2)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

If something "should work" but gives permission denied, the first culprit to check is SELinux 🙂

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @JoshuaJJ 

Make sure that the file has execute chmod settings so that it can be executed without prepending with "bash" (for example)

chmod +x <yourSHFile)

Please let me know how you get on and consider adding karma to this or any other answer if it has helped.
Regards

Will

0 Karma

JoshuaJJ
Path Finder

Good morning, thanks for your reply! File already has execute

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Thats odd @JoshuaJJ  - Please can you post the logs that ExecProcessor spits out so I can try and replicate this?

Thanks

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...