I am evaluating the latest Splunk release and is there a way to add additional servers to monitor in the *Nix application (CPU, memory, disk etc)?
The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Forums: SplunkGeneral: Adding additional servers to *Nix app?
Previous Topic: Collect syslog from non-plunk AIX machine to AIX splunk machine. | Next Topic: Create new Field and Assign existing field in transforms.conf
Posts 1–4 of 4
If you install splunk, enable the unix app, and configure it to forward from another server to your indexer, that will do it. you could also do it without forwarding via distributed search, but that means that you'd be running an indexer on the other host, which isn't usually what you want.
We have many existing Linux hosts running the Splunk forwarder and we don't really have access to the local webUI on each Linux host. Can we simply copy the *NIX app over to our Linux forwarders and restart Splunk to get the *NIX metrics forwarded to our Splunk server?
Im having the same problem and I dont know how to add additional Solaris boxes on my Splunk NIX app.
So far, my NIX app is monitoring CPU, memory, etc on its own box but I dont understand how to make the NIX to 'see' the same from all other machines on my network.
Manny