All Apps and Add-ons

Splunk Add-on for Unix and Linux - df.sh and cpu.sh result on index not parsed

rahmataw
Loves-to-Learn Lots

Hi, so I just try configure 1 Splunk Enterpise and 1 server installed with universal forwarder+ Splunk Add-on for Unix and Linux. When I check the event from Splunk server, I got this unusual result:

Screen Shot 2021-07-22 at 22.34.26.png

Screen Shot 2021-07-22 at 22.44.30.png

It is like my log not parsed, so there is no field about disk usage, cpu usage, etc. And because of that, when I use Splunk Apps for Unix and Linux for monitoring. I got below result:

Screen Shot 2021-07-22 at 22.42.39.png

 

How to solve this problem? I just follow the documentation and dont know how to solve this issue.

Labels (3)
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.