All Apps and Add-ons

Splunk Add-on for Unix - Updates for new OS releases


We are using the Splunk Add-on for Unix on all of our Unix and Linux servers. But lots of the scripts are quit old and fail on new operating releases like Solaris 11 whit ldoms and Zones, Redhat 7, Oracle Linux. We have adopted some of the scripts, but is quit a tedious work.
Has Splunk some plans to update this app, or are there other people around which face the same issue and are interested in some form of collaboration in updating this scripts?


Super Champion

I've the same concern as well. Though Unix systems are so important, the regexes are basic and they assign everything to "syslog" as sourcetype. Wish they had more specific sourcetypes and more cleaner approach for such an important TA

0 Karma


Hi FritzWittwer ,
This is a Splunk Supported App, updated in April 2016.
The only way to know some information about roadmap is to ask to Splunk Support opening a case.


0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...