can uf agent collect netstat type of data , like ip's ports etc... would like to get this info and create reports
Sure, it's built-in via the Scripted input feature.
View solution in original post
Yes, It can collect netstat type data
thanks, found it under the inputs.conf , a section for netstat /bin/netstat.sh
this is exactly what i want..
@jiaqya I have converted @ddrillic 's comment to answer since it seems to have resolved your issue. Kindly accept to mark this question as answered.
Also check out Splunk Add On builder app to convert your scripted input to an add-on.