All Apps and Add-ons

Splunk Add-on for Unix and Linux - and result on index not parsed

Loves-to-Learn Lots

Hi, so I just try configure 1 Splunk Enterpise and 1 server installed with universal forwarder+ Splunk Add-on for Unix and Linux. When I check the event from Splunk server, I got this unusual result:

Screen Shot 2021-07-22 at 22.34.26.png

Screen Shot 2021-07-22 at 22.44.30.png

It is like my log not parsed, so there is no field about disk usage, cpu usage, etc. And because of that, when I use Splunk Apps for Unix and Linux for monitoring. I got below result:

Screen Shot 2021-07-22 at 22.42.39.png


How to solve this problem? I just follow the documentation and dont know how to solve this issue.

Labels (3)
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!