Getting Data In

Start Splunk using batch file

harishalipaka
Motivator

Hi all,
I want splunk start using batch script ,when splunk is stopped..
I tried like this ..
when splunk status is stopped it will autometically run batch file to splunk start..

set PATH=C:\Program Files\Splunk\bin\splunk status
ECHO %PATH% 
PAUSE
if  %PATH% == splunk is stopped (
   change it
restart splunk
)  
Thanks
Harish
Tags (2)
0 Karma
1 Solution

harishalipaka
Motivator

thanks for your efforts..
This is my answer

set root=C:\Program Files\SplunkUniversalForwarder\bin
cd/
cd  %root% 
splunk start

finally i got but i dont know where can i store batch file in splunk.

Thanks
Harish

View solution in original post

harishalipaka
Motivator

thanks for your efforts..
This is my answer

set root=C:\Program Files\SplunkUniversalForwarder\bin
cd/
cd  %root% 
splunk start

finally i got but i dont know where can i store batch file in splunk.

Thanks
Harish

niketn
Legend

You can use Windows Service Configuration Manager to do this. Following seems to be a working script based off one of the answers on Stack Overflow https://stackoverflow.com/questions/3325081/how-to-check-if-a-service-is-running-via-batch-file-and-...

@Echo Off
set path="%WINDIR%\system32"
set ServiceName=splunkd

sc queryex "%ServiceName%"|Find "STATE"|Find /v "RUNNING">Nul&&(
    echo %ServiceName% not running 
    echo Start %ServiceName%

    Net start "%ServiceName%">nul||(
        Echo "%ServiceName%" did not start 
        exit /b 1
    )
    echo "%ServiceName%" started
    exit /b 0
)||(
    echo "%ServiceName%" Running
    exit /b 0
)

Please try out and confirm. PS: I have set the path to Windows system32 folder since the same is required to run sc and net start commands.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...