Splunk ITSI

Splunk Add-on for Unix and Linux - Not showing in Entity

Ann_Treesa
Observer

I have installed UF in one of the servers and did install the unix addon. Then restarted the uf services. However the entities didn't populate in ITSI page. Could someone please help on the same.

Labels (1)
0 Karma

Ann_Treesa
Observer

Yes, I enabled inputs in the TA. I'm already receiving data for 2 linux entities. 

Ann_Treesa_0-1738901998708.png

Is data from the TA being indexed? No

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

If data from the TA is not being indexed then ITSI cannot find it and display it.

Why is the data not indexed?

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Did you enable inputs in the TA?

Is data from the TA being indexed?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Simplifying the Analyst Experience with Finding-based Detections

    Splunk invites you to an engaging Tech Talk focused on streamlining security operations with ...

[Puzzles] Solve, Learn, Repeat: Word Search

This challenge was first posted on Slack #puzzles channelThis puzzle is based on a letter grid containing ...

[Puzzles] Solve, Learn, Repeat: Advent of Code - Day 4

Advent of CodeIn order to participate in these challenges, you will need to register with the Advent of Code ...