Getting Data In

Is it possible to run scripted input on the search peer?

aa70627
Communicator

Is it possible to run scripted input on the search peer? Also, is it possible to ensure it runs from all search peers ? Thanks ahead of time. 

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @aa70627,

which scripted input are you speaking for?

in other words, what do you want t otake with it? local or remote logs?

if local, there isn't any problem, you can distribute it to all indexers via Master Node and the logs are indexed on the same Indexer.

If you're speaking of remote logs, there's the problem that you probably you need only one execution of the script and not more than one.

Could you better describe your need?

Ciao.

Giuseppe

View solution in original post

aa70627
Communicator

My initial question was for the scripted input logs within local server. I wanted to run a script form each indexer and send the data to splunk. I was able to confirm it works the same as a scripted input on UF or SH. 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @aa70627,

which scripted input are you speaking for?

in other words, what do you want t otake with it? local or remote logs?

if local, there isn't any problem, you can distribute it to all indexers via Master Node and the logs are indexed on the same Indexer.

If you're speaking of remote logs, there's the problem that you probably you need only one execution of the script and not more than one.

Could you better describe your need?

Ciao.

Giuseppe

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: Splunk Observability Metrics Cost Optimization

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...