Getting Data In

Scripted data input producing output not appearing in Splunk

EricLloyd79
Builder

I am completely baffled on why some of the output I am producing from a script (its key-value pairs) is not appearing in Splunk.
I have a Python script producing 4 key-value pairs:
kv1=123
kv2=234
kv3=445
kv4=233

kv3 and kv4 are not appearing but kv1 and kv2 are appearing. I tried using /opt/splunk/bin/python script.py to test if its producing the output and all the kv pairs are there but having it installed in Splunk data inputs, I am not seeing the last two.

Oddly enough, I have an identical script on another machine that queries a different host for metrics and it is producing all 4 kv pairs.

Anyone have any ideas?

0 Karma

EricLloyd79
Builder

The illogical mystery deepens. Apparently the actual value for kv1 and kv2 goes to splunk but the value for kv3 and kv4 doesn't. If I put the kv1 and kv2 values in the kv pair of kv3 and kv4, it works, so its not the key part, its the value itself.. All of the values are integers. All of the values print when the script is manually run. It like Splunk doesn't like v3 and v4 for some reason.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...