Splunk ITSI

How to Transfer Data to ITSI With Splunk Add-on for Unix and Linux

hoangpt
Explorer

Hi everyone, I'm having some trouble and really need your help.

Currently, I'm deploying ITSI Splunk service and using Add-on for Unix and Linux on Splunk. The problem is that when I send data to ITSI, ITSI didn't receive any Entity 

splunk.png

Untitled.png

 
 

 

Down here is my configuration on Add-on for Unix and Linux : 

Screenshot 2020-10-11 160646.png

 
 

 

Also, my Splunk Enterprise has collected Linux log by Universal Forwarder . I don't know what is the problem with my ITSI. Please help me.

Labels (2)
0 Karma

hoangpt
Explorer

11.pngMy configuration on Add-on for Unix and Linux

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...