All Apps and Add-ons

Splunk App for Unix and Linux: How to index Linux inode data?

Explorer

We are trying to index the inode details for alerting on its usage. df -i. Please let me know how to index inodes details using splunk/SA-nix.

0 Karma

Splunk Employee
Splunk Employee

Go to the Splunk_TA_nix app directory, this is the other app that comes with the Splunk App for Unix and Linux. Inside it's "bin" directory is plenty of scripts you can use as a template. Including one for the "df" command.

0 Karma