Splunk script execution inputs.conf Interval ?
When the interval is provided as 1d i.e 86400s in the interval field in inputs.conf , when does the script get executed?
I understand every one hour it gets executed..But I wanted to understand at what time or when?
Is there a way to know this?
that is, as soon as the script exits, the input restarts it.
* The special value -1 causes the scripted input to run once on start-up.
Your script will execute once in a day based on your interval given as 86400 seconds.
Answer for second question is, this script will start execute first time when you start/restart splunk forwarder and then it will execute next time after 86400 seconds. For example : You have started/restarted forwarder at 11:01 AM and first time script ran at 11:01 AM today then next time it will execute tomorrow at 11:01 AM.
Any known method to alter polling interval for file monitoring?
Is it possible to stagger multiple checks in inputs.conf for a single app?
How Polling "interval" affect the granularity of the data ?
Splunk App for Stream: Why does set_permissions.sh selectively set the permissions on one file when inputs.conf uses a different file?