About bwhite

bwhite · ‎10-15-2023

Thanks for the reply. I did finally get back to this issue. I checked and noticed that the execute permissions were missing from the scripts as you mentioned. rw-rw-rw- Adding those permissions helped but something else was still missing that I never found. I finally solved it by downloading it directly to the server and expanding it there instead of downloading it and unzipping it on my machine first. Everything magically started working. Hope that helps, Brad.

bwhite · ‎09-30-2023

I edited the conf files on my local server before deploying, so I know they are all identical. I have 5 servers. I copied the Splunk_TA_nix folder to apps. 3 of the 5 have data showing up for the new "os" index. splunkd.log, in fact the whole splunk/log folder, didn't have any errors. But it also didn't have any mention of "idx=os" on the missing servers. I ran some of the scripts in Splunk_TA_nix/bin in debug mode. No errors. What log file or index do I check to debug the issue?

bwhite · ‎02-10-2023

For future users facing this, this can be caused by leading or trailing white space around the name of either the file or the lookup. Recreate and see if that fixes it.

Posts	3
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎02-10-2023

Online Status	Offline
Date Last Visited	‎10-16-2023 12:36 AM

Debugging TA_nix not reporting

Re: Debugging TA_nix not reporting

Debugging TA_nix not reporting

Re: Invalid lookup table ?