All Apps and Add-ons

Splunk_TA_nix on EC2 Instances

sloshburch
Splunk Employee
Splunk Employee

While playing with EC2 instances, I have the Splunk_TA_nix app deployed. The cpu.sh returns nothing because sar and mpstat are not found on the EC2 host.

I understand that Linux has other ways to pull in system metrics, but things are obviously simpler if the same Splunk_TA_nix could be used everywhere I have *nix.

Anyone solve this quirk?

0 Karma
1 Solution

wvonalt_splunk
Splunk Employee
Splunk Employee

@Burch - you've already hit the nail on the head... just install the war package on the system and the problem is solved.

View solution in original post

wvonalt_splunk
Splunk Employee
Splunk Employee

@Burch - you've already hit the nail on the head... just install the war package on the system and the problem is solved.

sloshburch
Splunk Employee
Splunk Employee

Oh, so manually install sar or mpstat? I was hoping we were just missing some other cpu command from our cpu.sh script 😞

0 Karma

sloshburch
Splunk Employee
Splunk Employee

Building off my own sillyness and expanding on @wvonalt answer:

Looks like it's as simple as yum install sysstat

0 Karma

sloshburch
Splunk Employee
Splunk Employee

My peers also hooked me up with this link, good to share here: http://docs.splunk.com/Documentation/UnixAddOn/latest/User/Whatdataarecollected

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...