splunk_manage_input
Toggles a configured Splunk data input stanza on or off by input type and name, letting you enable or disable monitoring, TCP, or HTTP inputs in write mode.
Instructions
Enable or disable a configured data input stanza (requires write mode).
Args: input_type: Type of input (e.g. 'monitor', 'tcp/raw', 'http'). name: Name or port of the input stanza. action: 'enable' or 'disable'.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | ||
| action | No | enable | |
| input_type | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Output payload or results | |
| error | No | Error message if execution failed | |
| success | No | Whether the tool execution succeeded | |
| metadata | No | Execution timing, pagination and environment details | |
| warnings | No | Operational warnings or notices | |
| request_id | No | Correlation ID for audit trail and observability |