topic Re: Splunk Add-on for Unix and Linux in All Apps and Add-ons

Splunk Add-on for Unix and Linux

lmjoin — Tue, 19 Jun 2018 16:20:05 GMT

Hello , we have indexer clustering setup. We need to implement Splunk Add-on for Unix and Linux to monitors hosts. How we can do.
in this case.

Re: Splunk Add-on for Unix and Linux

ChrisG — Tue, 19 Jun 2018 17:24:54 GMT

See the general instructions to Install an add-on in a distributed environment in the Splunk Add-ons manual. There is also some additional information in Deploy the Splunk Add-on for Unix and Linux in a distributed environment in Deploy and Use the Splunk Add-on for Unix and Linux.

Re: Splunk Add-on for Unix and Linux

lmjoin — Tue, 19 Jun 2018 18:06:40 GMT

Thanks for reply , i have read this and confusion in mind , here need data from hosts only , not from indexer and search head , but in that case i have to install app on both indexer and search head ?. can it have some logic ?

Re: Splunk Add-on for Unix and Linux

ChrisG — Tue, 19 Jun 2018 22:48:07 GMT

I am not sure I understand your question. If you don't understand the basic tiers of a Splunk deployment and what the function of each of them is (forwarder, indexer, search head), then you should learn that before you try to install an add-on, especially in a distributed deployment.

You have to install the add-on onto your indexers that are receiving data from your Linux hosts.

You have to install the add-on onto your search heads so you can search the indexed data.

You have to install a universal forwarder and the add-on onto each of your Linux hosts, so they can send the data to the indexer.

Re: Splunk Add-on for Unix and Linux

lmjoin — Thu, 21 Jun 2018 16:15:27 GMT

Thanks
i have put app under master indexer and push and updated and install on SH , add on forwarder but while configuring it require remote server URL , is it for master or any one

Re: Splunk Add-on for Unix and Linux

lmjoin — Tue, 03 Jul 2018 16:24:08 GMT

we need to install on which from we need data add on and on indexer and search head we need app.

Re: Splunk Add-on for Unix and Linux

lmjoin — Tue, 03 Jul 2018 16:24:34 GMT

we need to install add on on which from we need data and , on indexer and search head we need app.

Re: Splunk Add-on for Unix and Linux

sloshburch — Thu, 03 Jan 2019 17:36:19 GMT

I'm also having trouble following the question here. Specifically, I can't imagine where "remote server URL" came into play. If you can be super specific and show us what step of what page in the instructions you are running into a challenge then I'm sure we can help.