topic Re: Splunk Add-on for Unix and linux in All Apps and Add-ons

Splunk Add-on for Unix and linux

searching — Fri, 19 May 2023 16:44:12 GMT

After clicking save on the setup page of the Unix / Linux add-on I receive an error message. "There was an unexpected problem while saving inputs. please reload page and try again". Is the a solution for this issue or some key things to check?

Re: Splunk Add-on for Unix and linux

richgalloway — Fri, 19 May 2023 18:15:57 GMT

Assuming reloading the page and trying again didn't help, look in splunkd.log for helpful messages.

Re: Splunk Add-on for Unix and linux

cdstealer — Sat, 20 May 2023 17:34:14 GMT

Me too. Nothing regarding errors are logged, but it does product over 1000 lines for cron schedules.

I don't know if the OP has this, but no indices are detected on the setup page either. I'm running splunk 9.0.3 and nix 8.9.0.

Re: Splunk Add-on for Unix and linux

richgalloway — Sun, 21 May 2023 15:06:08 GMT

@cdstealer wrote:
... no indices are detected on the setup page either.

Are indexes configured on the instance? The app only knows the indexes that are known to the local instance. A search head does not ask indexers what indexes are set up - it's up to the Splunk Admin to set them up on the SH as well.

Re: Splunk Add-on for Unix and linux

cdstealer — Sun, 21 May 2023 16:50:17 GMT

Hi @richgalloway, Apologies for the late reply. It's a single instance, which is why I'm stuck. I don't have anything special setup, most things are at default. It's not a file permission thing from what I can see.