If the custom capability for a modular input is present, the custom capability is applied rather than the default admin_all_objects capability. However, you have the option to create a capability that customizes edit and create permissions for any specific modular input scheme. This capability also controls reading of other input endpoints.īy default, the admin_all_objects capability controls create and edit permissions for modular inputs. Read permission for modular input scripts is controlled by the list_inputs capability. Specify permissions for modular input scripts derives from the inputs stanza (for single script instance per input stanza mode) or the scheme name (for single script instance mode). The correct way to configure a persistent queue is to put the persistent queue parameters under each inputs stanza: Because each script produces its own stream, it can have its own persistent queue. In this mode, a script is spawned for each inputs stanza. There are differences depending on the type of modular input. You configure persistent queues for modular inputs much as you do with other inputs. You can use persistent queues with modular inputs much as you do with TCP, UDP, FIFO, and scripted inputs, as described in Use persistent queues to help prevent data loss. You can configure persistent queues with modular inputs. You cannot modify the interval value for single script instance mode using the endpoint. If interval is set under a specific input stanza, that value is ignored.įor single script instance mode, interval cannot be an endpoint argument, even if it is specified in. Single script instance per input stanza modeįor single script instance per input stanza mode, each stanza can specify its own interval parameter.įor single script instance mode, Splunk Enterprise reads the interval setting from the scheme default stanza only. The interval parameter is also useful to ensure that a script restarts, even if a previous instance of the script exits unexpectedly.Įntering an empty value for interval results in a script only being executed on start and/or endpoint reload (on edit). The interval parameter specifies when the script restarts to perform the task again. The script performs a specific task and then exits. The interval parameter is useful for a script that performs a task periodically. The interval parameter specifies how long a script waits before it restarts. Use the interval parameter to schedule and monitor scripts. Param2 = p2 #from Configuration stanza Interval parameter Host = myHost #from Global default, overridden by Scheme default Here is the spec file for the Amazon S3 example. The stanza definition and their parameters must start at the beginning of the line.A scheme must define at least one parameter.Subsequent definitions (a new scheme stanza) and their parameters are ignored. Modular inputs can only be defined once.Source sourcetype host index disabled interval persistentQueue persistentQueueSize queueSize However, you could specify these to help clarify the usage: Specifying any of the following parameters for your modular inputs has no effect.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |