This TA for Unix (TA-unix) is a fork of Splunk Add-on for Unix and Linux (https://splunkbase.splunk.com/app/833). It adds support for Arch & Debian Linux. It also fixes and adds support for MacOS.
Filter out multiple listing of the same btrfs volume Use mktemp for temp files (for times when the TA may be run outside of Splunk) If running rlog.sh outside of Splunk, use $HOME to store seek file Debian also uses apt Arch Linux uses pacman Add use of sudo -n for 'apt update' and 'pacman -Syy' vmstat uses "K paged out" Replace the use of 'sar' with netstat and vm_stat for MacOS |
||
---|---|---|
appserver/static | ||
bin | ||
default | ||
docs | ||
LICENSES | ||
lookups | ||
metadata | ||
README | ||
static | ||
app.manifest | ||
README.txt | ||
splunkbase.manifest | ||
THIRDPARTY | ||
VERSION |
Splunk Add-on for Unix and Linux Copyright (C) 2024 Splunk Inc. All Rights Reserved. For documentation, see: https://docs.splunk.com/Documentation/AddOns/released/UnixLinux/