Stop receiving from UDP port

[mjemi]

How i create a script to stop receiving data from UDP port on specific hours for  example betwenn 12h until 15h ?

[isoutamo]

I'm expecting that you are using linux. Then probably easiest way is just add root's cron commands to block that UDP port on correct interface and vice versa open it to correct times.
r. Ismo

[mjemi]

Yes, it's on Linux, but the probleme the firewall is down on Linux

[isoutamo]

It shouldn’t be too hard to bring it up for that port? Other option is use @saravanan90 option. Personally I don’t like to write admin credentials in plain text to servers!

[saravanan90]

You can try cron with the below to add /remove udp input.

./splunk add udp 514 -sourcetype yyyy -index xxxx -auth user:pass

./splunk remove udp 514 -sourcetype yyyy -index xxxx -auth user:pass