All Apps and Add-ons

Why am I getting this error trying to configure the Splunk Add-on for Unix and Linux on Windows 2012 R2?

New Member

I get the following error message when trying to configure the Splunk Add-on for Unix and Linux:

"This server is not running a known Unix or Linux operating system. Install this add-on on Unix or Linux systems only."

I can see a historical answer, but that was on Oracle Linux.

I posted another question recently (link below). Are we saying that the operating system Splunk Enterprise eval is installed on will be limited as to what data it can index i.e. I need a Windows install to get Windows data in and another Linux based install to get Linux data in?

0 Karma

Path Finder

You can get Unix data with a Windows indexer without problems, but you can't use the graphical interface to configure the Unix and Linux Add-on.

Just go into the add-on folder in windows explorer, copy the splunk/etc/apps/Splunk_TA_nix/default/inputs.conf to splunk/etc/apps/Splunk_TA_nix/local/inputs.conf and enable the options you want.

0 Karma
Get Updates on the Splunk Community!

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! 🌈 In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...