# Technical Add-on for Unix and Linux ## Version 9.2.0.5 (2025-01-11) Add script for docker events/metrics and support running TA outside of Splunk Changes: * Add docker.sh and docker_metric.sh for collecting docker events/metrics * Add helper script to extra/ to run the TA commands on systems without a Splunk forwarder. The commands can be sent to a syslog server. This script is useful for systems with small or read-only filesystems that cannot support a Universal Forwarder. * Add syslog_inputs_nix_ta app to extra/ for ingesting the data from syslog ## Version 9.2.0.4 (2025-01-11) Make distro_name work everywhere Changes: * For MacOS, print MacOS for distro_name * For others, print $KERNEL for distro_name ## Version 9.2.0.3 (2025-01-11) Fix bug in 9.2.0.2 Changes: * Add code I forgot for machine_arch for Linux * Add Makefile to make making releases easier ## Version 9.2.0.2 (2025-01-11) Improvements for version.sh Changes: * Include kernel_release, kernel_version, and distro_name * For Linux and MacOS, use actual OS versions/releases instead of kernel version/release ## Version 9.2.0.1 (2025-01-09) Initial fork of the Splunk Add-on for Unix and Linux Changes: * Use ip command to determine IP address ('hostname -I' does not work on all Linux systems) * Filter out multiple listing of the same btrfs volume * Use mktemp for temp files (for times when the TA may be run outside of Splunk) * If running rlog.sh outside of Splunk, use $HOME to store seek file * Debian also uses apt * Arch Linux uses pacman * Add use of sudo -n for 'apt update' and 'pacman -Syy' * vmstat uses "K paged out" * Replace the use of 'sar' with netstat and vm_stat for MacOS