All Apps and Add-ons

the scripts of Splunk Add-on for Unix and Linux pending in ps queue

carylin
Loves-to-Learn Lots

I run Universal Forwarder 8.0.3 & Splunk Add-on for Unix and Linux 8.0.0 on AIX 7.1
while I found no event came to index = OS
after I used ps -ef | grep splunk
I found some script ex. Iostat.sh ,cpu.sh ... pending in the queue
after we kill the jobs ex. Iostat.sh ,cpu.sh ... ,the event came to index
and the schedule scripts were running agent .
how can I trouble shooting the issue ????

Labels (1)
0 Karma

kpanchal_splunk
Splunk Employee
Splunk Employee

@carylin 

The logs for Splunk Add-on for Unix and Linux are falling under the splunkd.log file. So, you can search the logs using the query "index=_internal sourcetype=splunkd ERROR NIX" with an appropriate timestamp for troubleshooting the issues in your environment.

Hope this helps.

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...