Introspection seems to give me the data.mount_point only for "/" and not for the other file systems that I can see via the Linux "df -kh" command. How come?
By default this has configured to look only SPLUNK_HOME mount point. I don’t know if there is way to add additional mount points there.
If you need monitor other mount points and other Linux statistics, I think that you should use e.g. *nix ta for collecting logs and metrics https://splunkbase.splunk.com/app/833