New *Nix App Missing Valuable Data

[jodros]

I am testing the new *nix app. I was a heavy user of the previous *nix 4.6 app. Loved it. Am I missing some here? Where do I find the network utilization, file diff, user logon, etc data displayed?

[araitz · Accepted solution]

Hi jodros,

The new Splunk App for *Nix is indeed not a direct port of the previous app. There are some pages, such as diff, logon, and config, that were not brought over. The primary reason is that the core Splunk search and pivot pages solve those use cases just fine, and offer more flexibility. If you think that these are essential views, please let us know and we'll log an enhancement request for you.

Regarding network utilization, you should be able to see that via the metrics page.

-Alex

[araitz]

We don't test the 5.x TA with the 4.6 app, so unclear if there are any changes in the TA that would affect the old app.

[jodros]

I there any benefit to upgrade the Splunk_TA_nix to 5.0.2 if it is used with *nix 4.6?

[araitz]

In order for the app to be 5.x and 6.x compatible, it was far easier for us to implement the old style navigation than make the new style navigation work on 5.x.

[jodros]

Also on a side note, why does the new *Nix app utilize the old flashtime as well as old breadcrumb navigation within Splunk 6?

Thanks

[jodros]

Thank you for your quick response. I think that seals the deal for me. I like the *nix 4.6 UI much more than the new one. I do think the new UI is more modern and sleek, as well as easier to configure. However, the old *nix 4.6 UI provides much more meaningful data in a way which is easier to digest and utilize for my server engineers. It would be great to enter enhancement request for this. I would love to see all missing data from the old UI in the new; network, diff files, user, ntp, etc.

Thanks