Hey everyone.
I need to collect linux cpu utilization from forwarder, so what i did:
1. install universal forwarder and Splunk_TA_nix /opt/splunkforwarder/etc/apps/Splunk_TA_nix
2. add needed splunk server throu /opt/splunkforwarder/bin/splunk add forward-server ....
3. add needed files throu /opt/splunkforwarder/bin/splunk add monitor....
4. copy from default to local inputs.conf file with
Shows stats per CPU (useful for SMP machines)
[script://./bin/cpu.sh]
sourcetype = cpu
source = cpu
interval = 30
index = mods (existing)
disabled = 0
5. restart splunk
File monitor working fine, but CPU utilization not. No errors in splunkd.
