Deployment Architecture

Missing /sbin in PATH and troubleshoting *nix scripts not functioning

jhallman
Explorer

/sbin was not in the path so things like ifconfig used in *nix apps

$SPLUNK_HOME/etc/apps/unix/bin/interfaces.sh is not reporting throughpout data.

I tried Manager » Server controls Restart Splunk.

Will I have to restart the process itself to get it to recognize /sbin is now in the PATH?

Also, how can I more easily figure out when some *nix script is not working properly?

Thanks

Tags (1)
0 Karma

jhallman
Explorer

So each script calls common.sh

In common.sh we added

if [ $# -ge 1 -a "x$1" = "x--debug" ] ; then
        DEBUG=1
        TEE_DEST=`dirname $0`/debug--`basename $0`--`date | sed 's/ /_/g;s/:/-/g'`
else
        DEBUG=0
        TEE_DEST=/dev/null
fi
####Add this
    DEBUG=1
    TEE_DEST=`dirname $0`/debug--`basename $0`--`date | sed 's/ /_/g;s/:/-/g'`
####End Add

which created a debug file (for each script being run) and within
debug--interfaces.sh--* we saw ifconfig command not found.

We ultimately stopped/restarted the splunk service and the new PATH got picked up.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...