https://community.splunk.com/t5/Splunk-Enterprise-Security/What-provides-data-to-inputlookup-system-version-tracker/m-p/489565#M8223 <P>Hi</P> <P>It appears that for the windows addon there are some missing tags to populate information to this lookup.</P> <P>On a customers site i enabled the following input:</P> <PRE><CODE>[WinHostMon://OperatingSystem] disabled = 0 </CODE></PRE> <P>and added the following configuration to Splunk_TA_windows/local/tags.conf</P> <PRE><CODE>[eventtype=hostmon_inventory] system = enabled version = enabled </CODE></PRE> <P>I then re-ran the lookup generator(or just wait for a while) and the dashboard loaded fine with windows and linux devices populated.</P> <P>Thanks<BR /> Darren</P> Wed, 30 Sep 2020 04:47:51 GMT ddance_splunk 2020-09-30T04:47:51Z https://community.splunk.com/t5/Splunk-Enterprise-Security/What-provides-data-to-inputlookup-system-version-tracker/m-p/489564#M8222 <P>I'm trying to figure out what provides data to the inputlookup:system_version_tracker for ES. Currently its only populating linux machine information, but I am running the ta_windows add-on which I assumed would put data in here but its not populating with windows info. </P> <P>Just wondering which add-on would generate data that would get piped into this lookup</P> Wed, 30 Sep 2020 02:20:17 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/What-provides-data-to-inputlookup-system-version-tracker/m-p/489564#M8222 mmqt 2020-09-30T02:20:17Z https://community.splunk.com/t5/Splunk-Enterprise-Security/What-provides-data-to-inputlookup-system-version-tracker/m-p/489565#M8223 <P>Hi</P> <P>It appears that for the windows addon there are some missing tags to populate information to this lookup.</P> <P>On a customers site i enabled the following input:</P> <PRE><CODE>[WinHostMon://OperatingSystem] disabled = 0 </CODE></PRE> <P>and added the following configuration to Splunk_TA_windows/local/tags.conf</P> <PRE><CODE>[eventtype=hostmon_inventory] system = enabled version = enabled </CODE></PRE> <P>I then re-ran the lookup generator(or just wait for a while) and the dashboard loaded fine with windows and linux devices populated.</P> <P>Thanks<BR /> Darren</P> Wed, 30 Sep 2020 04:47:51 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/What-provides-data-to-inputlookup-system-version-tracker/m-p/489565#M8223 ddance_splunk 2020-09-30T04:47:51Z