All Apps and Add-ons

How to configure Splunk Universal Forwarder 6.2.4 to send data to NMON Performance Monitor for Unix and Linux Systems App?

New Member


We have Splunk Indexer 6.2.4 and Universal Forwarders 6.2.4 on client machines.
Recently we have installed NMON Performance Monitor for Unix and Linux Systems (TA-nmon) app on Splunk indexer, but we are not seeing any option to add server class for forwarders in Forwarding and Receiving tab in Splunk indexer console.
Can anyone help to troubleshoot this and add the TA-nmon app in forwarders?

0 Karma


Hi !

If you haven't yet, please take a look at Nmon documentation:
You have video tutorial that will show you how to install and deploy:

On the instance(s) acting as search heads, install the Nmon performance core application.
If you want to get performance data from these search heads, also deploy the TA-nmon.
On standalone indexers, deploy the TA-nmon.
On clustered indexers, deploy the PA-nmon. (provided in the resources directory of the core app package)

On your deployment server, create a server class, associate with your Universal forwarders clients instances, and add the TA-nmon to be deployed. (enable restart splunkd)
You will have off course unarchived the TA-nmon package in $SPLUNK_HOME/etc/deployment-apps/

Let me know if this is unclear.


0 Karma
Get Updates on the Splunk Community!

Splunk Education - Fast Start Program!

Welcome to Splunk Education! Splunk training programs are designed to enable you to get started quickly and ...

Five Subtly Different Ways of Adding Manual Instrumentation in Java

You can find the code of this example on GitHub here. Please feel free to star the repository to keep in ...

New Splunk APM Enhancements Help Troubleshoot Your MySQL and NoSQL Databases Faster

Splunk Observability has two new enhancements to make it quicker and easier to troubleshoot slow or frequently ...