All Apps and Add-ons

Splunk Add-on for Unix and LInux: Is it required to install the supporting add-on (SA-nix) on search head and Indexer clusters?

ishaanshekhar
Communicator

Dear SPLUNK Community,

According to the documentation: http://docs.splunk.com/Documentation/UnixAddOn/5.2.0/User/DeploytheSplunkAdd-onforUnixandLinuxinadis...
we need to install the Supporting Add-on (SA-nix) on the Search Head and Indexer clusters.

I have already installed the Splunk Add-on for Unix and Linux on the Search Head and Indexer clusters. And I do forward all data from SHs to indexer cluster.

I would like to know what would happen if I do not install the SA-nix there?

Thank you!
Ishaan

0 Karma
1 Solution

jcoates_splunk
Splunk Employee
Splunk Employee

Please see the documentation here as well: http://docs.splunk.com/Documentation/UnixApp/5.0.3/User/DeploytheSplunkAppforUnixandLinuxinadistribu...

SA-Nix supports the visible Unix app. You need it if you're using those dashboards, but you don't need it to work with Unix data directly in your own searches and reports.

View solution in original post

jcoates_splunk
Splunk Employee
Splunk Employee

Please see the documentation here as well: http://docs.splunk.com/Documentation/UnixApp/5.0.3/User/DeploytheSplunkAppforUnixandLinuxinadistribu...

SA-Nix supports the visible Unix app. You need it if you're using those dashboards, but you don't need it to work with Unix data directly in your own searches and reports.

ishaanshekhar
Communicator

Thank you! that helps.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...