Re: Splunk Add-on for Unix and Linux - Not showing...

Ann_Treesa · ‎02-06-2025

I have installed UF in one of the servers and did install the unix addon. Then restarted the uf services. However the entities didn't populate in ITSI page. Could someone please help on the same.

Ann_Treesa · ‎02-06-2025

Yes, I enabled inputs in the TA. I'm already receiving data for 2 linux entities.

Is data from the TA being indexed? No

richgalloway · ‎02-07-2025

If data from the TA is not being indexed then ITSI cannot find it and display it.

Why is the data not indexed?

---
If this reply helps you, Karma would be appreciated.

richgalloway · ‎02-06-2025

Did you enable inputs in the TA?

Is data from the TA being indexed?

---
If this reply helps you, Karma would be appreciated.

Splunk Add-on for Unix and Linux - Not showing in Entity

using ITSI

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Join the Conversation