Just installed latest Splunk App for Unix and Linux (had already installed TA). Upon running the app, I get the following messages:
home_disk_free Macro missing
home_cpu_idle Macro missing
unix_noop Macro missing
dropdowns.csv Lookup is invalid.
Have searched the App, and SA-Nix - the only macros I can find are the ones the setup program created in response to my entries during setup. I have searched the apps tgz file that was downloaded - nothing.
Anyone have any ideas?
Thanks.
I had a very similar issue and it turned out that the SA-nix app was incomplete/incorrect, so I downloaded it again just a few days after you posted this question.
https://answers.splunk.com/answers/469726/splunk-app-for-unix-and-linux-where-are-these-file.html