Configured the script based app for the databases which brings the data as follows. As mentioned below.
When I am running the script at UF corrected expeced output. But when I push an application containg the same script it is fetching me different output.
Expected data after running the script in the UF is as below.
Date, datname="sql", age="00:00:00"
Output we are receiving at splunk SH is like below.
Date, datname="datname", age="age"
The script is kept in the location -> /opt/splunkforwarder/etc/apps/appname/bin - scripts and /opt/splunkforwarder/etc/apps/appname/local - inputs.conf
For troubleshooting I have followed below steps.
Removed and Pushed the app again
Tried restarting the UF
Can any one know or faced similar issue.
Please help me on this.
