I am loading the Linux Auditd on cent o/s boxes. It works great with one box the others it finds them and shows me their IPs and some info in the Hosts panel but on the home panel it shows hosts missing. I put them in the retired folder and sure then they weren't missing but no info for them either. I took the splunk_TA_nix and Splunk TA auditd from the forwarder that worked and copied them to the others under the app folder still no data on the Splunk server. Any suggestions are welcome.
