We're monitoring a large number of RHEL boxes with the Unix App, and I notice that on some in the df sourcetype the MountedOn=/tmp information does not get forwarded. I think this depends on what filesystem /tmp is a part of - perhaps the unix App's implementation of df ignores some filesystems?
↧