I installed Splunk TA for *nix and I'm on the "Splunk for Unix Technology Add-on: Setup" page. I completed my selections and hit Save, then OK, but it brings me back to the same input selection page.
How do you get the app to execute?
I tried restarting Splunk -> Manager -> Apps -> Launch App.
I'm running Splunk on a Red Hat server.
Thanks
This is by design, the TA only has a one page UI to facilitate configuration.
This is by design, the TA only has a one page UI to facilitate configuration.
I have the same problem, I completed my selections and hit Save, then OK, but it brings me back to the same input selection page.
Have you enabled the inputs? Are you following the instructions in the documentation? See both the deployment and configuration topics, if you haven't already read them.
You can enable inputs in three ways officially:
As this is the Splunk TA for Unix and Linux, there's not really much to see, as it does not have more than a configuration UI in Splunk Web. You usually use the TA to forward *nix data to another instance which runs the Splunk App for Unix and Linux.
I enabled "All" File and Directory and Scripted Inputs on the Setup page.
Thanks for the quick response.
Where does one "enable the inputs"?
I installed it from Manager -> Apps -> "Install apps from file" (button). It then came up with the setup page and I can't seem to get out of setup mode.
I have read the instructions.