Getting Data In

Listing out all the inputs.conf

AL3Z
Builder

Hi, 

How we can list out all the apps inputs.conf blacklisted stanzas in the DS ? Coz I'm seeing the command line events are getting blocked in my Environment..

Thanks

0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @AL3Z .. in linux, using the find and grep commands.. you can find all the blacklisted lines recursively.  

 

find . -name '*.conf' -exec grep -i 'blacklist' {}\; -print

 

grep -Ril "text-to-find-here" /

i stands for ignore case (optional in your case).
R stands for recursive.
l stands for "show the file name, not the result itself".
/ stands for starting at the root of your machine.

 

 

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

AL3Z
Builder

Hi @inventsekar ,

Can we check in the windows system ?

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...