- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I am trying to use btool to find an index that is used in an inputs.conf:
./splunk btool inputs list --debug | grep "indexname"
However I get nothing back, am I doing something wrong?
Thanks,
- Joe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Assuming "indexname" is a placeholder for the name of index sought, then the syntax is correct. It's possible the index name is not specified in any inputs.conf file. Also, if the Splunk instance does not perform inputs then there may be no inputs.conf files for btool to display.
If you run Splunk on Linux and you have access to the CLI then the OS may be able to find the file. Run this command on your Deployment Server and SHC Deployer (or standalone instance, if that's all you have).
find /opt/splunk/etc -name inputs.conf -print0 | xargs -r0 grep "indexname"
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Assuming "indexname" is a placeholder for the name of index sought, then the syntax is correct. It's possible the index name is not specified in any inputs.conf file. Also, if the Splunk instance does not perform inputs then there may be no inputs.conf files for btool to display.
If you run Splunk on Linux and you have access to the CLI then the OS may be able to find the file. Run this command on your Deployment Server and SHC Deployer (or standalone instance, if that's all you have).
find /opt/splunk/etc -name inputs.conf -print0 | xargs -r0 grep "indexname"
If this reply helps you, Karma would be appreciated.
