I have created a custom search command and placed my py file in search/bin and then I have created search/local/commands.conf file and added
[data]
filename = data.py
streaming = false
changes_colorder = false
However when I restart splunk on the web interface the search command doesn't show up. And when I change the name of a command in the default/commands.conf file and restart splunk that doesn't show up either.
I have a test server that I tried everything on first and it all worked fine but as when I made the same changes on a search head we use everyday the search command doesn't show up under custom search commands.
I am using ubuntu and splunk version 4.3.2.
Is there something that is stopping splunk from grabbing the config files?
Any help would be appreciated.
Thanks,
Lucas
... View more