I've setup a new scripted input using power shell as follows:
Input.conf:
[script://$SPLUNK_HOME\bin\scripts\RESENDREQUEST.path]
source = RESENDREQUESTLOG
sourcetype = RESENDREQUESTLOG
interval = 10
disabled = 0
Created RESENDREQUEST.path in $SPLUNK_HOME\bin\scripts:
%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe -file "C:\Program Files\SplunkUniversalForwarder\bin\scripts\RESENDREQUEST.ps1"
Now, powershell isn#t being run and I see no errors in the splunkd.log file.
Any ideas?
Thanks!
Mark
↧