Splunk ITSI

Splunk Add-on for Unix and Linux - Not showing in Entity

Ann_Treesa
Observer

I have installed UF in one of the servers and did install the unix addon. Then restarted the uf services. However the entities didn't populate in ITSI page. Could someone please help on the same.

Labels (1)
0 Karma

Ann_Treesa
Observer

Yes, I enabled inputs in the TA. I'm already receiving data for 2 linux entities. 

Ann_Treesa_0-1738901998708.png

Is data from the TA being indexed? No

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

If data from the TA is not being indexed then ITSI cannot find it and display it.

Why is the data not indexed?

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Did you enable inputs in the TA?

Is data from the TA being indexed?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...