Hi,
I have the Splunk_TA_nix installed and deployed. In generel it works. I activated the interfaces.sh which does give me IPv4-Adresses and IPv6 Link-Local-Adresses but none else. Since I have a primarily IPv6 environment I miss the most importent part but I don't understand why it delivers me the link-locals but not the public adresses?
I could not find any documentation or anything about activating ipv6 for the interfaces.sh and since there are link-locals I guess it is activated but the script has maybe a bug.
Can anyone tell me if theres a better documentation for this script anywhere or knows why it does not collect the ipv6 adresses?
@bitnapper - interfaces.sh script internally using many commands depending on the flavor of Linux OS. (If you have to explore the journey yourself.)
Configured network interfaces via the shell commands dmesg, ethtool, ifconfig, kstat, lanscan, lanadmin, and netstat
(As per the documentation - https://docs.splunk.com/Documentation/AddOns/released/UnixLinux/About )
But regarding issue with the script, you can contact Splunk Support for the issue.
I hope this helps, Kindly upvote if it does!!!
I thought at least with a standard RHEL or Ubuntu it should work. So it seems I expected way to much. But when I have to maintain that for every upgrade, why do I need it? It seem I would be better of writing it myself when there so poorly maintained that even the most in uses *nixes aren't even decently supported?
Thanks for the link. I already had that but I thought that cant be all, is it?
@bitnapper - That's a Splunk support question. Please raise a support ticket if you think it's not working.