My Splunk UF's are installed on Linux. How do I get the OS version. (Not OS type). I am using Splunk App for Unix and Linux. Is there a way to get from that app.?
You need to deploy Splunk Add-on for Unix and Linux on UF, enable scripted input version.sh by putting below configurations in apps local directory (../Splunk_TA_nix/local/) and restart forwarder.
disabled = false
interval = 300
index = INDEX_NAME
source = Unix:Version
sourcetype = Unix:Version
Change interval as per your requirement.
enabling scripted input version.sh worked. Thanks for your inputs !!