topic Is there Splunk app available for FreeBSD ? in Splunk Enterprise

Is there Splunk app available for FreeBSD ?

Chaser — Sat, 05 Aug 2023 10:58:30 GMT

I'm using Pfsense as FreeBSD OS, I want to monitor basic performance metrices like RAM, CPU usage,.. Is there any Splunk app available out there that supports FreeBSD to perform above task ? Thanks all.

Re: Is there Splunk app available for FreeBSD ?

PickleRick — Sat, 05 Aug 2023 13:42:16 GMT

https://docs.splunk.com/Documentation/Splunk/9.1.0/Installation/Systemrequirements

You can install Universal Forwarder on your FreeBSD box and use it to collect data (possibly with TA-nix app) and forward it to a Splunk Enterprise/Splunk Cloud or Splunk Free instance on a supported OS.

Re: Is there Splunk app available for FreeBSD ?

Chaser — Sun, 06 Aug 2023 04:35:28 GMT

I also used Splunk TA-nix with Universal Forwarder on FreeBSD, but log pushed up to Splunk about performance of FreeBSD machine was not match with the stats that the machine's system has displayed. Specific, RAM of the machine is 20%, but log pushed up to Splunk is 94%, but CPU was matched. I cannot understand about this, can help me please. Thanks.

Re: Is there Splunk app available for FreeBSD ?

PickleRick — Mon, 07 Aug 2023 17:08:14 GMT

You'd have to check the scripts contained within the TA-nix. I don't know - maybe FreeBSD tools show the performance differently than expected by the script. Or maybe you're intepreting the data differently. Hard to say.