Hello, everyone. I just ran into an issue where a stanza within apps\SplunkUniversalForwarder\local\inputs.conf on a forwarder is overwriting other apps\AppName\local\inputs.conf  from other apps in the apps folder. I would like to either disable this app, or delete the \SplunkUniversalForwarder\local folder or delete the stanza. The problem is that this has happened on multiple hosts and I need an automated method of doing this. Does anyone have an idea so that this default app that I don't even want to touch doesn't overwrite my own actually used apps? Thanks ... View more

Hello, I have a simple .bat file that just performs a "dir" command to list everything in a folder.  I have set the input.conf to the following:   [script://.\bin\ListDir.bat] disabled = 0 ## Run Every Ten Seconds interval = 10 sourcetype = Script:ListDir index = main   I have placed my ListDir.bat in the application's \bin\ folder. When I run the command: splunk cmd ListDir.bat, splunk runs the bat files no problem, displaying all the files I want Splunk to ingest. However, looking at my Splunkd logs, I see that ExecProcessor lists the exact location where the bat file exists and reads "The system cannot find the file specified."   ERROR ExecProcessor [11384 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\etc\apps\Splunk_TA_Burn_Folder\bin\ListDir.bat"" The system cannot find the file specified.   I looked at the file permissions and I gave everyone access to this bat file. Any help is appreciated. ... View more