Getting Data In

Why is the interval of 1 second not working in input.conf?

kaushal28
New Member

I want to run my script at every second, so I set the interval to 1 second in input.conf file. But the script is not executed every second. So is there any minimum interval amount? Following is my input.conf file:

[amqp]
index = default
start_by_shell = false
sourcetype = amqp
interval = 1
reconnect = True
ssl_enabled = False

[amqp://input01]
interval = 1
reconnect = 1
source_url = 10.0.1.11:33037/examples
ssl_enabled = 0
0 Karma

_karlo
Explorer

From the documentation:

interval = [<number>|<cron schedule>]
* How often to run the specified command (in seconds), or a valid cron schedule.
* NOTE: when you specify a cron schedule, the input does not run the script on start-up.
* If you specify the interval as a number, it may have a fractional component; e.g., 3.14
* The cron implementation for data inputs does not currently support names of months or days.
* Defaults to 60.0 seconds.
* The special value 0 forces this scripted input to be run continuously; that is, as soon as the script exits, the input restarts it.
* The special value -1 causes the scripted input to run once on start-up.

There is no minimum it seems. Maybe your script is not quick enough? Or maybe look at setting it to 0; then it starts again after the command exits.

0 Karma

kaushal28
New Member

How can I ensure that the script is slow?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...