topic Re: no unix folder under /opt/splunk/etc/apps in All Apps and Add-ons

no unix folder under /opt/splunk/etc/apps

qubick — Wed, 05 Mar 2014 23:51:01 GMT

I installed "Splunk app for unix" by searching unix from "Find more apps" menu, based on the following instruction: http://answers.splunk.com/answers/50082/how-do-i-configure-a-splunk-forwarder-on-linux

And trying to copy /opt/splunk/etc/apps/unix according to the Step 8, because I hope my server(installed an indexer-instance of splunk) to be forwarded CPU/memory load (only two, not others) log data from other machines, but unable to find any folder named unix.

Is this the only way I could specify data I want them to be forwarded? Can I write a script into ~local/input (many from the forwarder not indexer) to specify data file related to CPU and memory load only, skipping copying ~/unix folder to the forwarder?

Re: no unix folder under /opt/splunk/etc/apps

lukejadamec — Mon, 28 Sep 2020 16:03:40 GMT

It looks like that is an old post.

In the apps folder you will find 3 unix app components:

SA-nix

splunk_app_for_nix

Splunk_TA_nix

Re: no unix folder under /opt/splunk/etc/apps

qubick — Thu, 06 Mar 2014 17:52:23 GMT

Thanks fount it, and does this mean I should copy all of those three to the forwarder. right?

Re: no unix folder under /opt/splunk/etc/apps

lukejadamec — Thu, 06 Mar 2014 17:54:43 GMT

I expect you only need to transfer/copy the ones that contain inputs.conf files, but it would not hurt to transfer them all.