We are running SPLUNK 6.1.4.
We have a server with a REST API feed which every so often stops processing. To start it again, we go to the console and disable/enable it and it works ok after that.
Is there a CLI option to perform a disable/enable of a CLI feed?
Thanks
Hi jasonhebron,
this example is using the web monitor app and shows how to disable and enable the modular input used by this app.
To disable this input you can POST this request to Splunk REST API:
curl -X POST -k -u admin:changeme https://localhost:8089//servicesNS/nobody/website_monitoring/data/inputs/web_ping/Answers/disable
This will disable the web monitor for the Answers stanza.
curl -X POST -k -u admin:changeme https://localhost:8089//servicesNS/nobody/website_monitoring/data/inputs/web_ping/Answers/enable
And this will enable it again.
Hope this helps ...
cheers, MuS
Hi jasonhebron,
this example is using the web monitor app and shows how to disable and enable the modular input used by this app.
To disable this input you can POST this request to Splunk REST API:
curl -X POST -k -u admin:changeme https://localhost:8089//servicesNS/nobody/website_monitoring/data/inputs/web_ping/Answers/disable
This will disable the web monitor for the Answers stanza.
curl -X POST -k -u admin:changeme https://localhost:8089//servicesNS/nobody/website_monitoring/data/inputs/web_ping/Answers/enable
And this will enable it again.
Hope this helps ...
cheers, MuS