Splunk ITSI

Splunk Add-on for Unix and Linux - Not showing in Entity

Ann_Treesa
Observer

I have installed UF in one of the servers and did install the unix addon. Then restarted the uf services. However the entities didn't populate in ITSI page. Could someone please help on the same.

Labels (1)
0 Karma

Ann_Treesa
Observer

Yes, I enabled inputs in the TA. I'm already receiving data for 2 linux entities. 

Ann_Treesa_0-1738901998708.png

Is data from the TA being indexed? No

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

If data from the TA is not being indexed then ITSI cannot find it and display it.

Why is the data not indexed?

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Did you enable inputs in the TA?

Is data from the TA being indexed?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...