Getting Data In

How to get all system logs like CPU, disk, and memory from a Splunk forwarder machine?



I want to get all system logs, like CPU, Disk, Memory and other system logs, from machine where my Splunk forwarder installed on a Linux machine.

Right now, I can only see CPU/DISK/Machine log from Splunk host machine, not from all my clients.

Can you help me? What do I have to set up?


0 Karma

Revered Legend

You can install Splunk TA for Linux app on your forwarders (I believe you've this app installed on your Splunk servers already).


Are you running the Splunk for Unix app?

If this reply helps you, Karma would be appreciated.
0 Karma


Yes into Linux box.
I have input files like this :

whitelist = stdout.log$|server.log$
index = myapp_pricer
sourcetype = myapp_log

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...