Splunk Search

inputs.conf entry to get linux operating system name and version

jcorcoran508
Path Finder

Greetings -

I do have the TA for nix.

I spend a couple of hours scouring all my resources and looking at the TA_nix  where to insert or turn an entry for the OS type.

On the linux side need to know if what vendor :  centos/RHEL ,  version 6,7,8 .

Any input would be appreciated.

0 Karma
1 Solution

s2_splunk
Splunk Employee
Splunk Employee

sourcetype=Unix:Version has a bunch of the fields (os_*) you are looking for. I am not sure the distribution name is part of that dataset, since there is no standard way of figuring that out across all *nix platforms. Do have that sourcetype in your indexed data?

View solution in original post

s2_splunk
Splunk Employee
Splunk Employee

sourcetype=Unix:Version has a bunch of the fields (os_*) you are looking for. I am not sure the distribution name is part of that dataset, since there is no standard way of figuring that out across all *nix platforms. Do have that sourcetype in your indexed data?

Get Updates on the Splunk Community!

Get Operational Insights Quickly with Natural Language on the Splunk Platform

In today’s fast-paced digital world, turning data into actionable insights is essential for success. With ...

What’s New in Splunk Observability Cloud – June 2025

What’s New in Splunk Observability Cloud – June 2025 We are excited to announce the latest enhancements to ...

Almost Too Eventful Assurance: Part 2

Work While You SleepBefore you can rely on any autonomous remediation measures, you need to close the loop ...