All Apps and Add-ons

Splunk_TA_nix on EC2 Instances

sloshburch
Splunk Employee
Splunk Employee

While playing with EC2 instances, I have the Splunk_TA_nix app deployed. The cpu.sh returns nothing because sar and mpstat are not found on the EC2 host.

I understand that Linux has other ways to pull in system metrics, but things are obviously simpler if the same Splunk_TA_nix could be used everywhere I have *nix.

Anyone solve this quirk?

0 Karma
1 Solution

wvonalt_splunk
Splunk Employee
Splunk Employee

@Burch - you've already hit the nail on the head... just install the war package on the system and the problem is solved.

View solution in original post

wvonalt_splunk
Splunk Employee
Splunk Employee

@Burch - you've already hit the nail on the head... just install the war package on the system and the problem is solved.

sloshburch
Splunk Employee
Splunk Employee

Oh, so manually install sar or mpstat? I was hoping we were just missing some other cpu command from our cpu.sh script 😞

0 Karma

sloshburch
Splunk Employee
Splunk Employee

Building off my own sillyness and expanding on @wvonalt answer:

Looks like it's as simple as yum install sysstat

0 Karma

sloshburch
Splunk Employee
Splunk Employee

My peers also hooked me up with this link, good to share here: http://docs.splunk.com/Documentation/UnixAddOn/latest/User/Whatdataarecollected

0 Karma
Get Updates on the Splunk Community!

New Case Study: How LSU’s Student-Powered SOCs and Splunk Are Shaping the Future of ...

Louisiana State University (LSU) is shaping the next generation of cybersecurity professionals through its ...

Splunk and Fraud

Join us on November 13 at 11 am PT / 2 pm ET!Join us for an insightful webinar where we delve into the ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...