All Apps and Add-ons

No display for "netstat" sourcetype for Solaris

broy32000
Explorer

We have splunk add-on for Unix installed. But it does not show any data for "netstat" sourcetype for Soalris clients. For Linux it does. Incidentally, Linuxhosts are indexers and heavy forwarders.

/app/splunk/splunkforwarder/etc/apps/Splunk_TA_nix/bin/netstat.sh is present in Solaris client, and it does output typical netstat like output.

Why are no data displayed in Splunk Web console?

Tags (1)
0 Karma

broy32000
Explorer

As per script compatibility table, https://docs.splunk.com/Documentation/AddOns/released/UnixLinux/Releasenotes
netstat is supported only for Linux. I am surprised because the script , netstat.sh works in Solaris

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...