Getting Data In

WMI and *NIX

xradim
Explorer

Hi,

I have walked through settings related to WMI and *NIX. I could see there is setting field related to credentials I would like to know what is the original design.

Is it possible to setup *NIX Splunk to collect data through WMI? I would be expecting it is possible but don't know the design.
I know I can do it with Windows Splunk installation, but would like to stay with one platform.

Thanks

Tags (1)
0 Karma

David
Splunk Employee
Splunk Employee

You can't monitor wmi from a *NIX server, unfortunately. What you can do, though, is set up a Windows box as a forwarder, have it grab the data via wmi and shoot it over to your *NIX Indexer. Or just install forwarders on the Windows boxes themselves, depending on your needs.

http://www.splunk.com/support/forum:SplunkAdministration/2432

getbman
New Member

Thank you for your answer on setting up a Windows box as a forwarder as a WMI proxy. By going down this path you are able to collect data - however the Windows App still expects WMI - is there a way to get the Windows App to work on a *nix installation of Splunk?

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...