All Apps and Add-ons

Will the Splunk App for Unix and Linux on a Windows server report on Linux metrics coming from a universal forwarder on Linux?

nk-1
Path Finder

Will the Windows version of the "Splunk App for Unix and Linux" report on Linux metrics?

My Splunk Servers are Windows-based, but I need to report on the metrics from a Linux (Redhat/CentOS) system.

I installed the Splunk_TA_nix app in a Linux Splunk Universal Forwarder, and I have all the metrics coming over to my Windows indexer now.

Rather than build my own custom dashboards doing things like:

earliest=-1m index=os sourcetype=cpu | rex "\nall\s+(?<pctUser>\d+[.]\d+)\s+(?<pctNice>\d+[.]\d+)\s+(?<pctSystem>\d+[.]\d+)\s+(?<pctIowait>\d+[.]\d+)\s+(?<pctIdle>\d+[.]\d+)"

is there a Splunk app that would already do all of that under Windows?

0 Karma
1 Solution

jeffland
SplunkTrust
SplunkTrust

The "Splunk App for Unix and Linux" can run on any server OS, its name should more accurately be "Splunk App for Unix and Linux data" or "Splunk App to supervise Unix and Linux". Once you have the TA up and running on your Linux forwarder, you can use that data any way you like on any Splunk on any OS.

View solution in original post

jeffland
SplunkTrust
SplunkTrust

The "Splunk App for Unix and Linux" can run on any server OS, its name should more accurately be "Splunk App for Unix and Linux data" or "Splunk App to supervise Unix and Linux". Once you have the TA up and running on your Linux forwarder, you can use that data any way you like on any Splunk on any OS.

nk-1
Path Finder

Thanks! I just installed it and it works in my Windows Splunk server instance.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...