https://community.splunk.com/t5/All-Apps-and-Add-ons/Best-Practices-for-implementing-Unix-and-Linux-OS-monitoring/m-p/471026#M57867 <P>I see a lot of posts within the <A href="https://answers.splunk.com/topics/validated_best-practice.html">validated_best-practice</A> tag related to Unix and Linux OS monitoring. Is there a list of these best practices for implementing Unix and Linux OS Monitoring?</P> <P>I know there could be a lot to say on this topic but I'm specifically focused on guidance for rapid deployment of the <A href="https://splunkbase.splunk.com/app/833/">Splunk Add-on for Unix and Linux</A> such that data collection is ready to be enabled based on my use case needs.</P> Wed, 04 Sep 2019 00:40:02 GMT sloshburch 2019-09-04T00:40:02Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Best-Practices-for-implementing-Unix-and-Linux-OS-monitoring/m-p/471026#M57867 <P>I see a lot of posts within the <A href="https://answers.splunk.com/topics/validated_best-practice.html">validated_best-practice</A> tag related to Unix and Linux OS monitoring. Is there a list of these best practices for implementing Unix and Linux OS Monitoring?</P> <P>I know there could be a lot to say on this topic but I'm specifically focused on guidance for rapid deployment of the <A href="https://splunkbase.splunk.com/app/833/">Splunk Add-on for Unix and Linux</A> such that data collection is ready to be enabled based on my use case needs.</P> Wed, 04 Sep 2019 00:40:02 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Best-Practices-for-implementing-Unix-and-Linux-OS-monitoring/m-p/471026#M57867 sloshburch 2019-09-04T00:40:02Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Best-Practices-for-implementing-Unix-and-Linux-OS-monitoring/m-p/471027#M57868 <H2><EM>The Splunk Product Best Practices team provided this response. Read more about <A href="https://www.splunk.com/blog/2019/02/25/how-crowdsourcing-is-shaping-the-future-of-splunk-best-practices.html">How Crowdsourcing is Shaping the Future of Splunk Best Practices</A>.</EM></H2> <P>Yes! Before you implement Unix and Linux OS monitoring, it’s important that you are familiar with the Splunk components such as <A href="https://docs.splunk.com/Splexicon:Forwarder">forwarders</A>, <A href="https://docs.splunk.com/Splexicon:Indexer">indexers</A>, and <A href="https://docs.splunk.com/Splexicon:Searchhead">search heads</A>.</P> <H1>Installation</H1> <P>As you noted, the <A href="https://splunkbase.splunk.com/app/833/">Splunk Add-on for Unix and Linux</A> is an excellent choice for a variety of data sources necessary for Unix and Linux OS monitoring use cases. The <A href="https://docs.splunk.com/Documentation/AddOns/latest/UnixLinux">Documentation for the Splunk Add-on for Unix and Linux</A> has everything you need, but for those in a rush, these two topics are critical:</P> <OL> <LI>Install the Add-on as per the documented instructions to <A href="https://docs.splunk.com/Documentation/AddOns/latest/UnixLinux/Install">install the Splunk Add-on for Unix and Linux</A>.</LI> <LI>Familiarize yourself with the instructions to <A href="https://docs.splunk.com/Documentation/AddOns/released/UnixLinux/Enabledataandscriptedinputs">enable data and scripted inputs for the Splunk Add-on for Unix and Linux</A>. This knowledge will be used as data sources are enabled for your use case implementation.</LI> </OL> <H1>Best Practices</H1> <P>With the Installation complete, refer to the following validated best practices:</P> <UL> <LI><A href="https://answers.splunk.com/answers/716045/what-are-best-practices-for-deploying-the-splunk-a.html">What are best practices for deploying the Splunk Add-on for Unix and Linux in a distributed environment?</A></LI> <LI><A href="https://answers.splunk.com/answers/711079/whats-the-best-practice-for-collecting-unix-os-dat.html">What's the best practice for collecting UNIX OS data?</A></LI> <LI><A href="https://answers.splunk.com/answers/709627/what-are-the-best-practices-for-collectdconf-for-i.html">What are the Best Practices for collectd.conf for Infrastructure Monitoring?</A></LI> <LI><A href="https://answers.splunk.com/answers/710445/which-unix-permissions-are-best-for-monitoring-fil.html">Which UNIX permissions are best for monitoring files?</A></LI> <LI><A href="https://answers.splunk.com/answers/709922/what-are-the-best-practices-to-create-a-local-conf.html">What are the best practices to create a local configuration file?</A></LI> <LI><A href="https://answers.splunk.com/answers/716229/what-are-best-practices-for-referencing-a-scripted.html">What are best practices for referencing a scripted input from another app?</A></LI> <LI><A href="https://answers.splunk.com/answers/716024/what-are-best-practices-for-deploying-an-add-on-wi.html">What are best practices for deploying an add-on with slightly different configurations?</A></LI> </UL> Wed, 04 Sep 2019 00:41:35 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Best-Practices-for-implementing-Unix-and-Linux-OS-monitoring/m-p/471027#M57868 sloshburch 2019-09-04T00:41:35Z