What actually happens when someone presses the "Disable" button on the page of a modular input?

[akorzun]

Hello,

I am writing a modular input in Java. What actually happens when someone presses the "Disable" button on the page of a modular input? Does Splunk just kill Java process? If it doesn't then how can I catch the close signal in Java? I want to write the graceful shutdown.

Thanks.

[rsennett_splunk]

When someone fills in the bits for your modular input, it creates an entry in inputs.conf. Disable is to disable that stanza in inputs.conf
So, it doesn't interrupt the current "grab" it will just not get data on the next interval and beyond...

[akorzun]

Thank you for the answer. I have one more question. What happens with an active modular input when Splunk is stopped?