Splunk® App for Unix and Linux (Legacy)

Install and Use the Splunk App for Unix and Linux

On March 13, 2022, the Splunk App for Unix and Linux will reach its end of life. After this date, Splunk will no longer maintain or develop this product. The functionality in this app has migrated to a content pack in Data Integrations. Learn about the Content Pack for Unix Dashboards and Reports.The Splunk Add-on for Unix and Linux remains supported.

Dashboard reference

This topic lists all of the dashboards provided in the Splunk App for Unix and Linux and provides a brief description of each.

Note: The dashboards referenced here apply only to the full Splunk App for Unix and Linux. The Splunk Add-on for Unix and Linux does not have a user interface.

Home

The Home dashboard displays when you first launch the Splunk App for Unix and Linux. It divides into two sections:

  • The left side displays performance radial graphs that show statistics of your choosing and update in real-time.
  • The right side shows "Recent Unix Headlines" - alerts that have triggered recently.

For more information about the Home dashboard, read "Use the Home Dashboard" in this manual.

Metrics

The Metrics dashboard displays detailed statistics on the hosts that the Splunk Add-on for Unix and Linux has collected data for, including information on CPU, disk, memory, I/O, process, and protocol metrics.

You can display information on a single host, a group of hosts, or a category of host groups. You can also filter by host.

To learn more about the Metrics dashboard, read "Use the Metrics dashboard" in this manual.

Hosts

The Hosts dashboard displays real-time information on the CPU, memory, I/O, and disk processes for all of the hosts that the Splunk Add-on for Unix and Linux has collected data for.

You can view information on a single host, a group of hosts, or a category of host groups. You can also choose a heat map to get a quick representation of system activity on all hosts, based on several different metrics.

You can also compare up to five hosts at once by selecting the hosts and clicking the Compare button.

For more information about the Hosts dashboard, read "Use the Hosts dashboard" in this manual.

Alerts

The Alerts dashboard displays a summary of the triggered alerts present in the Splunk App for Unix and Linux. The dashboard splits into three sections:

  • The Alert Time Range, which allows you to set the time range for triggered alerts, from the last 15 minutes up to the last week.
  • Statistics, which shows you the hosts that have triggered alerts, as well as which alerts have triggered and the severity of those alerts.
  • A Summary of the most recent triggered alerts.

For additional information about the Alerts dashboard, read "Use the Alerts dashboard" in this manual.

Search

The Search dashboard allows you to use Splunk's search language to display events that the Splunk App for Unix and Linux has collected. You can use the Search window to evaluate and save your own custom searches and reports.

Settings

The Settings dashboard lets you configure the Splunk App for Unix and Linux.

For more information on how to configure the app, read "Configure the Splunk App for Unix and Linux" in this manual.

Last modified on 12 March, 2021
Configure the Splunk App for Unix and Linux   Use the Home dashboard

This documentation applies to the following versions of Splunk® App for Unix and Linux (Legacy): 5.2.2, 5.2.3, 5.2.4, 5.2.5, 6.0.0, 6.0.1, 6.0.2


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters