All Apps and Add-ons

the scripts of Splunk Add-on for Unix and Linux pending in ps queue

carylin
Loves-to-Learn Lots

I run Universal Forwarder 8.0.3 & Splunk Add-on for Unix and Linux 8.0.0 on AIX 7.1
while I found no event came to index = OS
after I used ps -ef | grep splunk
I found some script ex. Iostat.sh ,cpu.sh ... pending in the queue
after we kill the jobs ex. Iostat.sh ,cpu.sh ... ,the event came to index
and the schedule scripts were running agent .
how can I trouble shooting the issue ????

Labels (1)
0 Karma

kpanchal_splunk
Splunk Employee
Splunk Employee

@carylin 

The logs for Splunk Add-on for Unix and Linux are falling under the splunkd.log file. So, you can search the logs using the query "index=_internal sourcetype=splunkd ERROR NIX" with an appropriate timestamp for troubleshooting the issues in your environment.

Hope this helps.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...