Data Inputs
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Data Inputs
Splunk's access to event data from files, FIFOs, network ports, and ODBC databases can be configured and controlled from the CLI, including its methods for setting meta data - host, source, and sourcetype.
Actions
- add
- edit
- remove
- list
Contexts
- tail
- batch
- fifo
- tcp
- udp
- odbc
Default Argument
- source
Parameters
Add
- Required
- source
- Optional
- sourcetype
- index
- hostregex
- hostname
- segmentnum
- liveonly
Edit
- Required
- source
- Optional
- sourcetype
- index
- hostregex
- hostname
- segmentnum
- livefiles
Remove
- Required
- source
List
- None
Examples
splunk add tail /var/log/myapp/ -sourcetype myApp splunk add batch /var/logarchive/ -host-method segment:2 splunk add udp 514 splunk edit odbc mysqlserver:stats -sourcetype mynewtype splunk remove odbc mysqltable splunk remove udp 514
This documentation applies to the following versions of Splunk: 2.1 , 2.2 , 2.2.1 , 2.2.3 , 2.2.6 View the Article History for its revisions.