Getting Data In

monitoring /dev/console /dev/tty

JasonCzerak
Explorer

Has anyone figured out how to monitor /dev/console?

araitz
Splunk Employee
Splunk Employee

Can you be more specific as to why you want to monitor /dev/console and what you want to monitor for?

If you have root, in Python you can use read() or os.read() to open /dev/console, which you could use in a scripted input:

f = open('/dev/console', 'r')
# do stuff like read()
0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...