About Unix and Linux entity integration in ITE Work

When you collect *nix data through the Unix and Linux entity integration in (ITE Work), your entities are created by discovery searches and are automatically associated with entity types. You also gain access to prebuilt dashboards for each associated entity type. The following sections walk through the two ways you can add *nix data to ITE Work through the Unix and Linux entity integrations. For information about data you can collect using this integration, see *nix data you can collect with ITE Work.

Collect *nix data with the Splunk Add-on for Unix and Linux

The Splunk Add-on for Unix and Linux collects both metrics and logs data. Entities created through the Splunk Add-on for Unix and Linux integration have the entity type Unix/Linux Add-on To use this integration you need to install and configure the Splunk Add-on for Unix and Linux and the Splunk universal forwarder. When you collect *nix data with the add-on, you don't run the easy install script. For more information, see Collect *nix data in ITE Work with the Splunk Add-on for Unix and Linux.

Collect *nix data with collectd and Splunk universal forwarder

There are two ways to collect *nix data with collectd and Splunk universal forwarder. Entities collected through collectd have entity type *nix.

Option one: Add data to ITE Work with the collectd easy install script

When you run the *nix collectd easy install script, the universal forwarder and collectd are automatically installed on your machine. You can collect logs in addition to the metrics in the easy install script. For more information, see Collect *nix metrics and logs with the data collection script in ITE Work.

Option two: Manually install and configure collectd and Splunk universal forwarder

You can manually set up collectd to collect metrics from a *nix host and collect log data for *nix systems with a universal forwarder. Manually configure metrics collection for a *nix host when you meet at least one of these conditions:

• You're installing collectd on a closed network with no internet access.
• You already installed collectd on the host.
• You don't have trusted URLs that you can download the required packages and dependencies from.

If you want to collect metrics from a *nix host, see Manually collect metrics from a *nix host in ITE Work. If you also want to collect log data from a *nix host, see Manually collect logs from a *nix host in ITE Work.

Troubleshooting

If you have problems setting up the Unix and Linux entity integration, see Troubleshoot the Unix and Linux entity integration in ITE Work.