I have single windows server running Splunk enterprise, and I have a Linux server with the universal forwarder installed and sending logs... that is working, now I need to add the nix-add-on so I can get stats on the Linux box, so I put the add-on in the /etc/apps folder in the universal forwarder and restarted... so forwarder should be running the add-on.
How do I configure the add on to send the data back to the (windows) Splunk server?
if I run the add on in the Splunk portal, it complains there is no Linux to run..
help!
↧