Splunk ITSI

Splunk Add-on for Unix and Linux - Not showing in Entity

Ann_Treesa
Observer

I have installed UF in one of the servers and did install the unix addon. Then restarted the uf services. However the entities didn't populate in ITSI page. Could someone please help on the same.

Labels (1)
0 Karma

Ann_Treesa
Observer

Yes, I enabled inputs in the TA. I'm already receiving data for 2 linux entities. 

Ann_Treesa_0-1738901998708.png

Is data from the TA being indexed? No

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

If data from the TA is not being indexed then ITSI cannot find it and display it.

Why is the data not indexed?

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Did you enable inputs in the TA?

Is data from the TA being indexed?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...