Splunk TA for *nix installation

[terryloar]

I installed Splunk TA for *nix and I'm on the "Splunk for Unix Technology Add-on: Setup" page. I completed my selections and hit Save, then OK, but it brings me back to the same input selection page.

How do you get the app to execute?

I tried restarting Splunk -> Manager -> Apps -> Launch App.

I'm running Splunk on a Red Hat server.

Thanks

[araitz · Accepted solution]

This is by design, the TA only has a one page UI to facilitate configuration.

[mickchen]

I have the same problem, I completed my selections and hit Save, then OK, but it brings me back to the same input selection page.

[ChrisG]

Have you enabled the inputs? Are you following the instructions in the documentation? See both the deployment and configuration topics, if you haven't already read them.

[malmoore]

You can enable inputs in three ways officially:

• Via the CLI: http://docs.splunk.com/Documentation/UnixApp/latest/User/First-timeconfiguration
• With configuration files: http://docs.splunk.com/Documentation/UnixApp/latest/User/InstalltheSplunkTechnicalAddonforUnixandLin...
• Via the setup dialog

As this is the Splunk TA for Unix and Linux, there's not really much to see, as it does not have more than a configuration UI in Splunk Web. You usually use the TA to forward *nix data to another instance which runs the Splunk App for Unix and Linux.

[terryloar]

I enabled "All" File and Directory and Scripted Inputs on the Setup page.

[terryloar]

Thanks for the quick response.

Where does one "enable the inputs"?

I installed it from Manager -> Apps -> "Install apps from file" (button). It then came up with the setup page and I can't seem to get out of setup mode.

I have read the instructions.