Need help with splunk add-on for linux

Roy_9 · ‎08-21-2024

Hello,

we are trying to see if os version (eg. RHEL6, UBUNTU 6.x) from splunk add-on for linux, we have enabled version.sh script and trying to see how to get this info, currently i am only getting os_name as linux,

Is this possible to get additional info like RHEL, UBUNTU, please help me out.

Thanks

richgalloway · ‎08-21-2024

The TA just captures the results from running shell scripts. Feel free to update the script(s) and/or props to produce the desired fields. Of course, you are responsible for maintaining/supporting those updates.

---
If this reply helps you, Karma would be appreciated.

Need help with splunk add-on for linux

metadata

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Join the Conversation

Need help with splunk add-on for linux

metadata

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A