How to Transfer Data to ITSI With Splunk Add-on fo...

hoangpt · ‎10-11-2020

Hi everyone, I'm having some trouble and really need your help.

Currently, I'm deploying ITSI Splunk service and using Add-on for Unix and Linux on Splunk. The problem is that when I send data to ITSI, ITSI didn't receive any Entity

Down here is my configuration on Add-on for Unix and Linux :

Screenshot 2020-10-11 160646.png

Also, my Splunk Enterprise has collected Linux log by Universal Forwarder . I don't know what is the problem with my ITSI. Please help me.

hoangpt · ‎10-11-2020

My configuration on Add-on for Unix and Linux

How to Transfer Data to ITSI With Splunk Add-on for Unix and Linux

configuration

using ITSI

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation