Getting Data In

Is it possible to run scripted input on the search peer?

aa70627
Communicator

Is it possible to run scripted input on the search peer? Also, is it possible to ensure it runs from all search peers ? Thanks ahead of time. 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @aa70627,

which scripted input are you speaking for?

in other words, what do you want t otake with it? local or remote logs?

if local, there isn't any problem, you can distribute it to all indexers via Master Node and the logs are indexed on the same Indexer.

If you're speaking of remote logs, there's the problem that you probably you need only one execution of the script and not more than one.

Could you better describe your need?

Ciao.

Giuseppe

View solution in original post

aa70627
Communicator

My initial question was for the scripted input logs within local server. I wanted to run a script form each indexer and send the data to splunk. I was able to confirm it works the same as a scripted input on UF or SH. 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @aa70627,

which scripted input are you speaking for?

in other words, what do you want t otake with it? local or remote logs?

if local, there isn't any problem, you can distribute it to all indexers via Master Node and the logs are indexed on the same Indexer.

If you're speaking of remote logs, there's the problem that you probably you need only one execution of the script and not more than one.

Could you better describe your need?

Ciao.

Giuseppe

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Rounding off the Splunk Dashboard Contest

What does a contest-winning Splunk dashboard look like? In this case, it isn't in a browser tab at all. It ...

A Four Part Event Series: AI + Observability: AI Agents, LLMs, Apps, & Infrastructure

AI + Observability: AI Agents, LLMs, Apps, & Infrastructure The rapid evolution of artificial intelligence ...

Splunk Technical Support Is Moving to Cisco Support Tools

Introduction Splunk technical support is transitioning to Cisco’s support environment. This change brings ...