Troubleshoot the Splunk Add-on for Unix and Linux
General troubleshooting
For troubleshooting tips that you can apply to all add-ons, see Troubleshoot add-ons in Splunk Add-ons. For additional resources, see Support and resource links for add-ons in Splunk Add-ons.
Missing data from scripts
- Navigate to
$SPLUNK_HOME/etc/apps/Splunk_TA_nix/bin
. - Run
sh <script_name> --debug
to run the script in debug mode. - The debug output is saved in
debug--<script_name>--<date_and_time_of_execution>
. This file contains the command that was executed, and its output or the failure reason. Use this information to resolve the missing data issue.
Enable data and scripted inputs for the Splunk Add-on for Unix and Linux |
This documentation applies to the following versions of Splunk® Add-on for Unix and Linux (Legacy): 6.0.0
Feedback submitted, thanks!