{"id":781,"date":"2013-02-08T07:54:39","date_gmt":"2013-02-08T07:54:39","guid":{"rendered":"https:\/\/cowman-chiang.no-ip.org\/wordpress\/?p=781"},"modified":"2019-06-20T10:26:34","modified_gmt":"2019-06-20T02:26:34","slug":"splunk-cli-with-script","status":"publish","type":"post","link":"https:\/\/cowmanchiang.me\/wp\/?p=781","title":{"rendered":"Splunk CLI With Script"},"content":{"rendered":"<p>\u56e0\u70ba Splunk CLI \u4e00\u6a23\u9700\u6a23\u767b\u5165<br \/>\n\u6240\u4ee5\u53ef\u4ee5\u5148\u5728 Script \u6a94\u6848\u4e2d\u9810\u5148\u8f38\u5165\u5e33\u865f\u3001\u5bc6\u78bc<\/p>\n<pre lang=\"bash\">\n    export SPLUNK_USERNAME=\u5e33\u865f\n    export SPLUNK_PASSWORD=\u5bc6\u78bc\n<\/pre>\n<p>\u7136\u5f8c\u5728\u4e0b Splunk \u7684\u767b\u5165\u3001\u67e5\u8a62\u7b49\u6307\u4ee4<\/p>\n<pre lang=\"bash\">\n    \/opt\/splunk\/bin\/splunk login\n    \/opt\/splunk\/bin\/splunk search 'index=_internal source=*metrics.log group=per_index_thruput NOT (series=_* OR series=*summary) starttime=02\/07\/2013:00:00:00 | timechart span=1d sum(eval(kb\/1024)) AS \"MB indexed\" by series | fields + main | fields - _* | outputcsv test_usage.csv'\n<\/pre>\n<p>\u9019\u908a\u4e3b\u8981\u662f\u5c07\u7d50\u679c\u8f38\u51fa\u5230 test_usage.csv \uff0c\u9810\u8a2d\u5b58\u653e\u8def\u5f91\u70ba &#8220;\/opt\/splunk\/var\/run\/splunk\/&#8221; (\u6a94\u6848\u683c\u5f0f\u70baCSV)<br \/>\n\u4e26\u4e14\u8f38\u51fa\u6b04\u4f4d\u50c5\u7559\u4e0b &#8220;main&#8221;<\/p>\n<p>\u9806\u5e36\u4e00\u63d0\u7684\u662f Splunk CLI \u6307\u4ee4\u4e2d\u4e0d\u80fd\u5305\u542b\u5e38\u7528\u7684 Script \u8b8a\u6578<br \/>\n\u6240\u4ee5\u53ef\u4ee5\u5148\u7528 Script \u5c07\u8b8a\u6578\u642d\u914d Splunk \u6307\u4ee4\u8f38\u51fa\u5230\u4e00\u500b\u6587\u5b57\u6a94\u4e2d<br \/>\n\u518d\u53bb\u57f7\u884c\u8a72\u6587\u5b57\u6a94\uff0c\u4e0b\u9762\u662f\u500b\u4f8b\u5b50<\/p>\n<pre lang=\"bash\">\n\/bin\/sh \/tmp\/test_usage.sh > \/tmp\/test_usage2.sh\n\/bin\/sh \/tmp\/test_usage2.sh\n<\/pre>\n<p>\u800c\u7b2c\u4e00\u500b Script \u6a94\u6848\u8981\u6ce8\u610f\u4fdd\u7559\u5b57\u5143\u7684\u90e8\u5206<\/p>\n<pre lang=\"bash\">\n\/bin\/echo \"export SPLUNK_USERNAME=\u5e33\u865f\"\n\/bin\/echo \"export SPLUNK_PASSWORD=\u5bc6\u78bc\"\n\/bin\/echo \"\/opt\/splunk\/bin\/splunk login\"\n\/bin\/echo \"\/opt\/splunk\/bin\/splunk search 'index=_internal source=*metrics.log group=per_index_thruput NOT (series=_* OR series=*summary) starttime=$(date '+%m\/%d\/%Y'):00:00:00 | timechart span=1d sum(eval(kb\/1024)) AS \"MB indexed\" by series | fields + main | fields - _* | outputcsv test_usage.csv'\"\n\/bin\/echo \"\/bin\/echo \"\u5df2\u4f7f\u7528\u984d\u5ea6\"\"\n\/bin\/echo \"\/bin\/echo $(\/bin\/sed '1d;s\/^.\/\/;s\/.$\/\/' \/opt\/splunk\/var\/run\/splunk\/test_usage.csv)\"\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>\u56e0\u70ba Splunk CLI \u4e00\u6a23\u9700\u6a23\u767b\u5165 \u6240\u4ee5\u53ef\u4ee5\u5148\u5728 Script \u6a94\u6848\u4e2d\u9810\u5148\u8f38\u5165\u5e33\u865f\u3001\u5bc6\u78bc export SPLUNK_USERNAME=\u5e33\u865f export SPLUNK_PASSWORD=\u5bc6\u78bc \u7136\u5f8c\u5728\u4e0b Splunk \u7684\u767b\u5165\u3001\u67e5\u8a62\u7b49\u6307\u4ee4 \/opt\/splunk\/bin\/splunk login \/opt\/splunk\/bin\/splunk search &#8216;index=_internal source=*metrics.log group=per_index_thruput NOT (series=_* OR series=*summary) starttime=02\/07\/2013:00:00:00 | timechart span=1d sum(eval(kb\/1024)) AS &#8220;MB indexed&#8221; by series | fields + main | &hellip; <a href=\"https:\/\/cowmanchiang.me\/wp\/?p=781\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[77],"tags":[],"class_list":["post-781","post","type-post","status-publish","format-standard","hentry","category-splunk"],"_links":{"self":[{"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=\/wp\/v2\/posts\/781","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=781"}],"version-history":[{"count":1,"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=\/wp\/v2\/posts\/781\/revisions"}],"predecessor-version":[{"id":2098,"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=\/wp\/v2\/posts\/781\/revisions\/2098"}],"wp:attachment":[{"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=781"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=781"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cowmanchiang.me\/wp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=781"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}