Getting Data In

How to integrate unix script in splunk

abhayneilam
Contributor

Hi,

I am very much comfortable in Unix Shell Scripting, I would like to know how it is possible to intergrate it with splunk, I am currently using Windows server, Is there any way to write unix shell scripting being on windows machine and also i will process the raw log with the help of unix shell scripting and those output will get imported to splunk automatically.

Thanks,
Abhay

0 Karma

lguinn2
Legend

Splunk can't run a Linux shell script on a Windows machine, because it uses the underlying OS - Splunk doesn't re-implement the shell!

However, you could install one of the many Linux emulators on your Windows server. Then have Splunk run a batch script that launches the emulator and runs your Linux script. Google "run linux on windows" to get a sense of what's available out there, mostly for free.

0 Karma

shaleenbemus
New Member

Does Splunk have a standard Splunkforwarder startup script? I am being told that its ia simple one line command that needs to be run as root
ex:
/apps/splunk/splunkforwarder set up

0 Karma

Ayn
Legend

What do you want help with? Lisa already gave you the facts - in Splunk in Windows, you have the same scripting capabilities as when you run anything else in a Windows environment. Powershell, batch scripts, VBscript etc.

0 Karma

abhayneilam
Contributor

Since I am working in windows but I am very much comfortable in Shell Scripting , I would like to do the stuffs using shell scripting . kindly help me !!

Thanks

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...