About btcdirectinfra

btcdirectinfra · ‎10-05-2016

So then i installed the sysstat package on those (forward) servers with: yum install sysstat Fixed it! (To understand why one server already had this package installed, well.. maybe i once needed it and forgot about it).

btcdirectinfra · ‎10-05-2016

So i logged in to each server and added the forwarder address again (just to be sure) and restarted splunk. Nothing changed. But the local logs pointed out that deployment command of the Splunk_TA_nix app was sent from the deployment server. So then i turned on all the scripts (Splunk indexer > GUI > data inputs > external scripts > enabled a lot of them). So i see that the cpu script does not return data from all servers, but the uptime script does. I am still looking into the environment differences that can explain this different behaviour.

btcdirectinfra · ‎10-05-2016

On the Splunk Light server (indexer + UI , configured to be Distributer) i did the following: I installed the Splunk Add-on for Unix and Linux (Splunk_TA_nix) according to instructions. I set up the class so all my servers are included for this app. Configured which scripts it should run (external data input scripts) I restarted several times. Each server I want to monitor has an Universal Forwarder installed. Now, only 2 out of the total 5 forwarders return "Splunk_TA_nix app" metrics. They are all identical in OS, Firewalling, Forwarder installation procedure. Is there a way to make this work, without changing each forwarder individually? Because if it were like 500 instead of 5 forwarders, i would have a problem. Thanks in advance.

btcdirectinfra · ‎08-17-2016

You may like this thread and vote for it. https://mailgun.uservoice.com/forums/156243-general/suggestions/7904907-export-suppression-bounces-unsubscribes-and-logs

btcdirectinfra · ‎06-21-2016

The log that is displayed in mailgun. I think it is retrievable by api: https://documentation.mailgun.com/api-events.html#events So i would have to build a script to retreive the data and store it into a logfile. And ofcourse some logrotation. After that, adding the file to Splunk and fieldextraction should be no problem.

btcdirectinfra · ‎06-20-2016

Good question. I would also like to do this.

Posts	6
Solutions	1
Karma Given	7
Karma Received	1
Member Since	‎06-20-2016

Online Status	Offline
Date Last Visited	‎09-12-2022 08:27 PM

Splunk Add-on for Unix and Linux: Is there a way t...

Re: Splunk Add-on for Unix and Linux: Is there a w...

Re: Splunk Add-on for Unix and Linux: Is there a w...

Splunk Add-on for Unix and Linux: Is there a way t...

Re: How to forward email client logs to Splunk?

Re: How to forward email client logs to Splunk?

Re: How to forward email client logs to Splunk?