Getting Data In

Scripted input not working

dolezelk
Explorer

[script://$SPLUNK_HOME/etc/apps/serial_numbers/bin/test.sh]
disabled = false
host = PoC_test
index = snmp
interval = 60.0
sourcetype = serial_custom
source = PoC_test

when my script contains folowing, it will not provide anything to Splunk

!/bin/sh

/usr/bin/snmpget -v1 -O0 -c public poc_test IF-MIB::ifPhysAddress.1

but this works fine:

!/bin/sh

/usr/bin/snmpget -v1 -c public poc_rm IF-MIB::ifPhysAddress.1

anyone know where is the problem ?

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...