All Apps and Add-ons

Splunk_TA_nix on EC2 Instances

sloshburch
Ultra Champion

While playing with EC2 instances, I have the Splunk_TA_nix app deployed. The cpu.sh returns nothing because sar and mpstat are not found on the EC2 host.

I understand that Linux has other ways to pull in system metrics, but things are obviously simpler if the same Splunk_TA_nix could be used everywhere I have *nix.

Anyone solve this quirk?

0 Karma
1 Solution

wvonalt_splunk
Splunk Employee
Splunk Employee

@Burch - you've already hit the nail on the head... just install the war package on the system and the problem is solved.

View solution in original post

wvonalt_splunk
Splunk Employee
Splunk Employee

@Burch - you've already hit the nail on the head... just install the war package on the system and the problem is solved.

sloshburch
Ultra Champion

Oh, so manually install sar or mpstat? I was hoping we were just missing some other cpu command from our cpu.sh script 😞

0 Karma

sloshburch
Ultra Champion

Building off my own sillyness and expanding on @wvonalt answer:

Looks like it's as simple as yum install sysstat

0 Karma

sloshburch
Ultra Champion

My peers also hooked me up with this link, good to share here: http://docs.splunk.com/Documentation/UnixAddOn/latest/User/Whatdataarecollected

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...