Hi everyone,
I am using the Splunk_TA_nix to collect unix data on my local single Splunk instance. As far as I understand entities get published from splunk_app_for_infrastructure and then appears as entities in ITSI. But somehow the entities will not get transferred. I have one entitie in infrastructure app and zero in ITSI at the moment. I activatet the data input from Infrastructure App for the app server, my entity is getting recognized, but not pushed to ITSI:
Can anybody help? I also checked all troubleshooting steps mentioned here: https://docs.splunk.com/Documentation/ITSI/4.6.2/SAIInt/Troubleshooting
Thank you!