All Apps and Add-ons
Highlighted

What apps or add-ons should I use to monitor Linux machines?

Path Finder

Hi,

I have a little bit of experience working with Splunk in a Windows environment.

I have been tasked with identifying what the product can do it in a Linux Environment.

A cursory search revealed 3 apps/add-ons:

1) Splunk App for Unix and Linux

2) Splunk Add on for Unix and Linux

3) NMON Performance Monitor for Unix and Linux Systems

I also have very little practical experience with Linux. Could you tell me which I might want to use with Splunk?

My audience wants to know the potential of Splunk to monitor Linux systems in terms of Dashboards and I don't know where to start.

I have one Ubuntu Linux VM to play with.

Thanks!!

0 Karma
Highlighted

Re: What apps or add-ons should I use to monitor Linux machines?

SplunkTrust
SplunkTrust

Hi infras2sec, The nix addon / app are good places to start for basic OS related inputs and visualizations. Start with the addon, look through the inputs, and create a local inputs.conf with the stanza name for each input as you'd like, and set disabled=0 to override the default disabled=1. You also might want to override the default index assignment, although this has an impact on the saved searched the the visualizations use.

As a note, the nix app takes some study to get put in right, and to be made the most of.

Past the basic /var/log type monitoring, and whatever performance related metrics you are interested in getting (the addon has all this), you can then look at what specific applications you are interested in. Many of these sourcetypes are parsed out of the box. You can find a list here. http://docs.splunk.com/Documentation/Splunk/6.4.2/Data/Listofpretrainedsourcetypes

Apache webserver (and other webservers) come to mind. Past that you'll want to find apps for other specific softwares you're shop is running on linux.

Please let me know if this answers your question!

View solution in original post

Highlighted

Re: What apps or add-ons should I use to monitor Linux machines?

Path Finder

Thank you, I appreciate this. I am sure that I'll have to come back for more for help. I have a very close deadline unfortunately!

0 Karma
Highlighted

Re: What apps or add-ons should I use to monitor Linux machines?

SplunkTrust
SplunkTrust

no problem, glad to help anytime. Did you mean to accept my answer? 😄

0 Karma
Highlighted

Re: What apps or add-ons should I use to monitor Linux machines?

Path Finder

Yes, I intended to accept your answer. It is certainly acceptable at a high level!

Highlighted

Re: What apps or add-ons should I use to monitor Linux machines?

Community Manager
Community Manager

Converted and accepted 🙂 cheers

Patrick

0 Karma
Highlighted

Re: What apps or add-ons should I use to monitor Linux machines?

Path Finder

I hate to ask in such a brute way....but for simple ease, would you select the app or the add on? Remember, I can hardly navigate my way around splunk or unix. 🙂

0 Karma
Highlighted

Re: What apps or add-ons should I use to monitor Linux machines?

SplunkTrust
SplunkTrust

I'd start with just the add-on. It contains the inputs you need to get data off the system

0 Karma
Highlighted

Re: What apps or add-ons should I use to monitor Linux machines?

Path Finder

I thought so. Makes sense. Thanks again.

0 Karma
Highlighted

Re: What apps or add-ons should I use to monitor Linux machines?

Path Finder

I actually installed Splunk Enterprise on a Windows Server, but would like to monitor Linux clients.

I installed the Nix add-on and it has lots of buttons to play with, but I see an orange bar with the following message:

"This server is not running a known Unix or Linux operating system. Install this add-on on Unix or Linux systems only."

Did I goof here?

How can I monitor Linux Clients with a Windows installed version of Splunk?

Thanks

The following thread seems to allude to an answer, but it is generally Greek to me at this point:

https://answers.splunk.com/answers/237809/why-am-i-getting-this-error-trying-to-configure-th.html

0 Karma