Adding timestamps to scripts, Vagrantfile_prebuilt, logo
This commit is contained in:
@@ -1,6 +1,6 @@
|
||||
# Purpose: Configures the inputs.conf for the Splunk forwarders on the Windows hosts
|
||||
|
||||
Write-Host "Setting up Splunk Inputs for Sysmon & osquery"
|
||||
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Setting up Splunk Inputs for Sysmon & osquery"
|
||||
|
||||
$inputsPath = "C:\Program Files\SplunkUniversalForwarder\etc\apps\SplunkUniversalForwarder\local\inputs.conf"
|
||||
$currentContent = get-content $inputsPath
|
||||
@@ -8,22 +8,22 @@ $targetContent = get-content c:\vagrant\resources\splunk_forwarder\inputs.conf
|
||||
|
||||
if ($currentContent -ne $targetContent)
|
||||
{
|
||||
Write-Host "Stopping the Splunk forwarder"
|
||||
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Stopping the Splunk forwarder"
|
||||
try {
|
||||
Stop-Service splunkforwarder -ErrorAction Stop
|
||||
} catch {
|
||||
Write-Host "Failed to stop SplunkForwarder. Trying again..."
|
||||
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Failed to stop SplunkForwarder. Trying again..."
|
||||
Set-Location "C:\Program Files\SplunkUniversalForwarder\bin"
|
||||
& ".\splunk.exe" "stop"
|
||||
}
|
||||
|
||||
Write-Host "Deleting the default configuration"
|
||||
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Deleting the default configuration"
|
||||
Remove-Item $inputsPath
|
||||
|
||||
Write-Host "Copying over the custom configuration"
|
||||
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Copying over the custom configuration"
|
||||
Copy-Item c:\vagrant\resources\splunk_forwarder\inputs.conf $inputsPath
|
||||
|
||||
Write-Host "Starting the Splunk forwarder"
|
||||
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Starting the Splunk forwarder"
|
||||
Start-Service splunkforwarder
|
||||
}
|
||||
else
|
||||
@@ -34,4 +34,4 @@ If ((Get-Service -name splunkforwarder).Status -ne "Running")
|
||||
{
|
||||
throw "splunkforwarder service was not running."
|
||||
}
|
||||
Write-Host "Splunk forwarder installation complete!"
|
||||
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Splunk forwarder installation complete!"
|
||||
|
||||
Reference in New Issue
Block a user