Getting Data In
Provide Splunk Cloud feedback in this confidential UX survey by June 17
for a chance to win a $200 Amazon gift card!

Windows UF script runs every 4 minutes, 30 minutes gap after midnight


I have a netstat script that I run inside the Windows_TA app
it runs every 240 seconds (4 minutes), last run of the day is at 11:56:01.000 PM
at midnight something happens and this script doesn't show any data until 12:26AM

my timeline show a 30 minutes gap daily after midnight, is that a bug on the version I am using?

disabled = 0
interval = 240
sourcetype = Script:TCPPorts

0 Karma

Splunk Employee
Splunk Employee

Hi GArienti!

You can debug scripted inputs by checking index=_internal source=*splunkd.log ExecProcessor *win_All_TCP_ports.bat for any stderr that may have been emitted from your script at this time. Do you see any errors?

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!