I have deployed Splunk Add-on for Unix and Linux to collect data from all Linux machines. However, I need this one parameter
cpu_wait_queue
which is not collected from the default scripts.
Command used to view this :
vmstat
Could you please help me to collect this parameter?
Did you try enabling the input "vmstat.sh" of the add-on? This input leverages the same command that you want to get the required information from.
Hope this helps.
You need to enable the script:
./splunk cmd sh $SPLUNK_HOME/etc/apps/Splunk_TA_nix/bin/setup.sh --enable-all
If that's already been done, ensure execution privs to the vmstat script (chmod +x) e.g.
Documentation:
https://docs.splunk.com/Documentation/AddOns/released/UnixLinux/Enabledataandscriptedinputs