Using btool to find an index in a monitor stanza

[joe06031990]

Hi, 

I am trying to use btool to find an index that is used in an inputs.conf:

./splunk btool inputs list --debug | grep "indexname"

However I get nothing back, am I doing something wrong?

Thanks,

• Joe 

[richgalloway · Accepted solution]

Assuming "indexname" is a placeholder for the name of index sought, then the syntax is correct.  It's possible the index name is not specified in any inputs.conf file.  Also, if the Splunk instance does not perform inputs then there may be no inputs.conf files for btool to display.

If you run Splunk on Linux and you have access to the CLI then the OS may be able to find the file.  Run this command on your Deployment Server and SHC Deployer (or standalone instance, if that's all you have).

find /opt/splunk/etc -name inputs.conf -print0 | xargs -r0 grep "indexname"