All Apps and Add-ons

How I can automatically remove unused token in Monitoring Docker - Metrics and Logs Forwarding?

splunkTest13
Explorer

Hello 🙂

I have a question. I just created a script for ansible in Python which asked Splunk to generate and enable token, and asked docker to run the container with the token returned.
I tried many times to execute the script, as it worked before, I realized that I have created like 20 tokens.

So, it's not a good way to access the web interface and is deleting all tokens with 3 clicks per one.

So my question is :
Is there an existing way known if tokens receive a log from docker container? Or something to automatically delete it?

Thank's a lot,

Have a great day.

Juliette

0 Karma

outcoldman
Communicator

You can use HTTP Event Collector: Instance dashboard in Monitoring Console to find which tokens were used (received data, etc).

I don't know of any automatic way to delete these tokens. But you can just open the inputs.conf file and remove these tokens from here and reload input settings after that https://yoursplunk.com/en-US/debug/refresh (if that does not work, you will need to restart the splunk). Another option is to use Http Event Collector CLI http://dev.splunk.com/view/event-collector/SP-CAAAE7D

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...