All Apps and Add-ons

Can the S.o.S app use data from the Windows and *nix TA instead of the S.o.S TAs?

hvandenb
Path Finder

I already have the standard Windows TA and Unix TA why do I need to install the SOA TAs? Are they not compatible and if not why can't they be?

hexx
Splunk Employee
Splunk Employee

Scripted inputs 'lsof.sh' and 'ps.sh' from the *nix TA should be compatible with the S.o.S usage resource dashboards, as long as you change the 'set_sos_index' macro in $SPLUNK_HOME/etc/apps/sos/local/macros.conf and point it to the index where those scripted inputs are writing events - typically, the 'os' index. Do note, however, that some fixes and improvements we did to the S.o.S TA for *nix scripted inputs will not be incorporated to the equivalent inputs in the *nix TA.

The S.o.S TA for Windows provides a custom-made scripted input ('ps_sos.ps1') that gathers per-process resource usage with a format identical to that of 'ps.sh'. The Windows TA does not offer such a scripted input.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Word Search

This challenge was first posted on Slack #puzzles channelThis puzzle is based on a letter grid containing ...

[Puzzles] Solve, Learn, Repeat: Advent of Code - Day 4

Advent of CodeIn order to participate in these challenges, you will need to register with the Advent of Code ...

GA: S3 Promote for Historical Data Ingestion in Splunk Cloud

Ingest Historical S3 Data On-Demand: Announcing the General Availability of S3 Promote We’re excited to share ...