The Metrics Add-on for Infrastructure (TA-linux-metrics) can be used on Linux Forwarders to send Operating System metrics to Splunk without using collectd or the HTTP Event Collector (HEC) and it is fully compatible with the 'Splunk App for Infrastructure' :- https://splunkbase.splunk.com/app/3975/ One of the most powerful features of the add-on is the ability to add custom dimensions to each metric, e.g. cloud, region, dc, & environment. Please read the 'Details' tab for installation instructions. Katana1 Built: https://katana1.com