Getting Data In

Troubleshooting Scripted Inputs


Where can I find the error messages generated by scripted inputs?

Tags (1)

Re: Troubleshooting Scripted Inputs


The error output of scripted inputs is indexed by Splunk in the `_internal` index. You can search the errors with a similar search to the following:

index="_internal" error

You should see notices that look like `ERROR ExecProcessor`, followed by the script path/name.

This data is also kept in `$SPLUNK_HOME/var/log/splunk/splunkd.log`.

View solution in original post

Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.