All Apps and Add-ons

How to configure Splunk Universal Forwarder 6.2.4 to send data to NMON Performance Monitor for Unix and Linux Systems App?

New Member


We have Splunk Indexer 6.2.4 and Universal Forwarders 6.2.4 on client machines.
Recently we have installed NMON Performance Monitor for Unix and Linux Systems (TA-nmon) app on Splunk indexer, but we are not seeing any option to add server class for forwarders in Forwarding and Receiving tab in Splunk indexer console.
Can anyone help to troubleshoot this and add the TA-nmon app in forwarders?

0 Karma


Hi !

If you haven't yet, please take a look at Nmon documentation:
You have video tutorial that will show you how to install and deploy:

On the instance(s) acting as search heads, install the Nmon performance core application.
If you want to get performance data from these search heads, also deploy the TA-nmon.
On standalone indexers, deploy the TA-nmon.
On clustered indexers, deploy the PA-nmon. (provided in the resources directory of the core app package)

On your deployment server, create a server class, associate with your Universal forwarders clients instances, and add the TA-nmon to be deployed. (enable restart splunkd)
You will have off course unarchived the TA-nmon package in $SPLUNK_HOME/etc/deployment-apps/

Let me know if this is unclear.


0 Karma
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...