About the Splunk Add-on for Unix and Linux

The Splunk Add-on for Unix and Linux provides inputs for Linux and Unix management. Unlike the full app, it does not contain any dashboards, reports, or saved searches, nor does it have a user interface.

You can install the Splunk Add-on for Unix and Linux on a forwarder to send data from any number of *nix machines to a central Splunk indexer or group of indexers that run the app. You can also use the add-on to provide data for other apps, such as the Splunk App for Enterprise Security.

For more information about what the full app does, read "About the Splunk App for Unix and Linux."

For more information about what data the add-on collects from your *nix servers, read "What data the Splunk App and Splunk Add-on for Unix and Linux collect."

How does it work?

The Splunk Add-on for Unix and Linux runs on top of a Splunk indexer or forwarder and, like the full app, gathers various system metrics using a number of data inputs. These include but are not limited to:

• Hardware information - CPU type, count, and cache; hard drives; network interface cards, count, and memory, as well as CPU statistics.
• Disk information, including available disk space and associated input/output statistics for devices and partitions.
• Information about the configured network interfaces, including connections, routing tables, and TCP/UDP transfer statistics .
• User statistics, including last login times for system accounts, user attributes, and security-related information.
• Information about processes, the files they open, and other resources they use.

How do I get it?

Download the Splunk Add-on for Unix and Linux from Splunkbase.

How do I upgrade from a previous version?

If you are already running the Splunk Technology Add-on for Unix and Linux and want to upgrade, the upgrade process is simple - you download the add-on installation package and unpack it into the same directory as the existing technology add-on.

For information on known issues in this version, review the release notes.