Getting Data In

Start Splunk using batch file

harishalipaka
Motivator

Hi all,
I want splunk start using batch script ,when splunk is stopped..
I tried like this ..
when splunk status is stopped it will autometically run batch file to splunk start..

set PATH=C:\Program Files\Splunk\bin\splunk status
ECHO %PATH% 
PAUSE
if  %PATH% == splunk is stopped (
   change it
restart splunk
)  
Thanks
Harish
Tags (2)
0 Karma
1 Solution

harishalipaka
Motivator

thanks for your efforts..
This is my answer

set root=C:\Program Files\SplunkUniversalForwarder\bin
cd/
cd  %root% 
splunk start

finally i got but i dont know where can i store batch file in splunk.

Thanks
Harish

View solution in original post

harishalipaka
Motivator

thanks for your efforts..
This is my answer

set root=C:\Program Files\SplunkUniversalForwarder\bin
cd/
cd  %root% 
splunk start

finally i got but i dont know where can i store batch file in splunk.

Thanks
Harish

niketn
Legend

You can use Windows Service Configuration Manager to do this. Following seems to be a working script based off one of the answers on Stack Overflow https://stackoverflow.com/questions/3325081/how-to-check-if-a-service-is-running-via-batch-file-and-...

@Echo Off
set path="%WINDIR%\system32"
set ServiceName=splunkd

sc queryex "%ServiceName%"|Find "STATE"|Find /v "RUNNING">Nul&&(
    echo %ServiceName% not running 
    echo Start %ServiceName%

    Net start "%ServiceName%">nul||(
        Echo "%ServiceName%" did not start 
        exit /b 1
    )
    echo "%ServiceName%" started
    exit /b 0
)||(
    echo "%ServiceName%" Running
    exit /b 0
)

Please try out and confirm. PS: I have set the path to Windows system32 folder since the same is required to run sc and net start commands.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...