- Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Re: Scripted Inputs for *Nix
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Scripted Inputs for *Nix
Hello,
I'm having a hard time funding the documentation for the scripts that come with the standard installation of the Splunk for Unix and Linux app. Where can I go to find out what kinds of statistics these scripts are actually gathering individually?
Thanks,
Alex
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can run script manually and see the output too.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have not found any documentation on what the scripts do either. So far as I can tell, the way you find out what the scripts do is to read the scripts.
The scripts are located in the etc/apps/unix/bin folder.
Unfortunately, there are not a lot of informative comments included in the scripts. Modifying the scripts to include comments would be an enhancement.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The scripts are in the unix app or TA_nix app depending on which one you installed. You can find them in the bin folder.
splunk/etc/apps/unix/bin
If you cannot "locate" the cpu.sh script, the you probably have a permission problem.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There is not folder like this when I install app. Folder is splunk_app_for_nix. Its not reflected in documentation.
Also there is no setup.sh in bin folder, so how should I enable inputs?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm not seeing the 'apps' directory within etc/.
I ran 'locate cpu.sh' and it did not come up with anything.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The scripts for collecting data are on the server that is being monitored.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is that on the Splunk server, or the server that I am monitoring?
More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk
.conf24 | Personalize your .conf experience with Learning Paths!
Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...
