Getting Data In

Start Splunk using batch file

harishalipaka
Motivator

Hi all,
I want splunk start using batch script ,when splunk is stopped..
I tried like this ..
when splunk status is stopped it will autometically run batch file to splunk start..

set PATH=C:\Program Files\Splunk\bin\splunk status
ECHO %PATH% 
PAUSE
if  %PATH% == splunk is stopped (
   change it
restart splunk
)  
Thanks
Harish
Tags (2)
0 Karma
1 Solution

harishalipaka
Motivator

thanks for your efforts..
This is my answer

set root=C:\Program Files\SplunkUniversalForwarder\bin
cd/
cd  %root% 
splunk start

finally i got but i dont know where can i store batch file in splunk.

Thanks
Harish

View solution in original post

harishalipaka
Motivator

thanks for your efforts..
This is my answer

set root=C:\Program Files\SplunkUniversalForwarder\bin
cd/
cd  %root% 
splunk start

finally i got but i dont know where can i store batch file in splunk.

Thanks
Harish

niketn
Legend

You can use Windows Service Configuration Manager to do this. Following seems to be a working script based off one of the answers on Stack Overflow https://stackoverflow.com/questions/3325081/how-to-check-if-a-service-is-running-via-batch-file-and-...

@Echo Off
set path="%WINDIR%\system32"
set ServiceName=splunkd

sc queryex "%ServiceName%"|Find "STATE"|Find /v "RUNNING">Nul&&(
    echo %ServiceName% not running 
    echo Start %ServiceName%

    Net start "%ServiceName%">nul||(
        Echo "%ServiceName%" did not start 
        exit /b 1
    )
    echo "%ServiceName%" started
    exit /b 0
)||(
    echo "%ServiceName%" Running
    exit /b 0
)

Please try out and confirm. PS: I have set the path to Windows system32 folder since the same is required to run sc and net start commands.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...