Hi,
I have a Linux server on which Splunk is installed and its system log is automatically showing on Splunk under Settings -> Distributed management console. Some of the logs are coming from /opt/splunk/etc/system/default/inputs.conf, but still there are some logs like disk space which I am not getting from where it would be taken? So any suggestions here?
Thanks in Advance
You can see the Disk Usage under Resource usage tab.
Normally resource usage logs are taken from $SPLUNK_HOME/var/log/introspection/resource_usage.log
Also have a look at https://splunkbase.splunk.com/app/273/ if you have a distributed linux system
You can see the Disk Usage under Resource usage tab.
Normally resource usage logs are taken from $SPLUNK_HOME/var/log/introspection/resource_usage.log
Also have a look at https://splunkbase.splunk.com/app/273/ if you have a distributed linux system