Can I injest CPU, memory,eventID data in metric index by using SPLUNKappfor Windows ? I am getting data once I injest this data in event index but when I am changing the index to metric index the...
Forthe ones who use theUnix addon for extracting authentication events for Enterprise Security, and some events are not recognized, mainly on Ubuntu Linux (not tested on other distribs), here's the...
...:Update 204 0.217% apache:error 188 0.2% Btw, I installed SplunkAppforUnixandSplunk Add-on forUnixandLinux on my Splunk. But this shall not attribute to the additional sourcetypes coming u...
HI,
I recently deployed Splunk Enterprise Security 4.5 into a Search Head Cluster and whenever I use theSplunkAppforUnixandLinux, I am getting the below error from all indexers:
[PROD-X...
Hi,
I've installed theSplunkAppforUnixandLinux on a Windows 2008 Server andSplunk Add-on forUnixandLinux on a Universal Forwarder on a Linux RedHat 5.5 Server.
I've configured theSplunk...
Hi there, I am using REHL 8.6 x86_64 (0otpa) / Kernel 4.18.0 and trying to update Splunk Add-on forUnixandLinux...I am getting this error - An error occurred while downloading theapp An error o...
Hi, Given the below system architecture on a single server: 1. When I pass the OS data generated by theSplunk addon (SplunkAppforUnixandLinux) through the universal forwarder to Splunk...
I installed Splunk Add-on forUnixandlinux on a single Splunk server environment for testing. However, each time I go to theApp, it shows the set up page. I made the selection, clicked save b...
Hi ,
I have splunk_TA_NIX app installed on indexer,Heavy Forwarder and search heads.
When i search index=os sourcetype=cpu on indexers i can see below fields.
But same query w...
Trying to monitor the performance data on MacOS and downloaded Splunk Add-on forUnixandLinux After clicking 'save' for setting on Splunk Enterprise Web, it shows the page that says 'S...