Installation

Linux patching details in splunk

manjunath_0208
Loves-to-Learn Everything

How do we get Linux patching details in Splunk

Labels (1)
0 Karma

Azeemering
Builder

You need to install the Splunk Add-on for Unix and Linux 

https://docs.splunk.com/Documentation/AddOns/released/UnixLinux/About

With this you can ollect *nix data from *nix hosts.

Then you enable the input version.sh on the hosts that you want the information from and that gives you the OS version details.

From here you can create a SPL search and or report for each host.

 

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...