Getting Data In
Highlighted

How to get the OS version in which Splunk UF is running

Explorer

Hi Everyone,

My Splunk UF's are installed on Linux. How do I get the OS version. (Not OS type). I am using Splunk App for Unix and Linux. Is there a way to get from that app.?

0 Karma

Re: How to get the OS version in which Splunk UF is running

Influencer

You need to deploy Splunk Add-on for Unix and Linux on UF, enable scripted input version.sh by putting below configurations in apps local directory (../SplunkTAnix/local/) and restart forwarder.

[script://./bin/version.sh]
disabled = false
interval = 300
index = INDEX_NAME
source = Unix:Version
sourcetype = Unix:Version

Change interval as per your requirement.

Highlighted

Re: How to get the OS version in which Splunk UF is running

Explorer

enabling scripted input version.sh worked. Thanks for your inputs !!

0 Karma