All Apps and Add-ons

Splunk Add-on for Unix and Linux - df.sh and cpu.sh result on index not parsed

rahmataw
Loves-to-Learn Lots

Hi, so I just try configure 1 Splunk Enterpise and 1 server installed with universal forwarder+ Splunk Add-on for Unix and Linux. When I check the event from Splunk server, I got this unusual result:

Screen Shot 2021-07-22 at 22.34.26.png

Screen Shot 2021-07-22 at 22.44.30.png

It is like my log not parsed, so there is no field about disk usage, cpu usage, etc. And because of that, when I use Splunk Apps for Unix and Linux for monitoring. I got below result:

Screen Shot 2021-07-22 at 22.42.39.png

 

How to solve this problem? I just follow the documentation and dont know how to solve this issue.

Labels (3)
0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!