Merge pull request #904 from splunk/linux-sysmon-ta

splunk · Jul 3, 2024 · 30f96c0 · 30f96c0
2 parents 3fc879a + 1c2b383
commit 30f96c0
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/packer/ansible/roles/linux_sysmon/files/inputs.conf b/packer/ansible/roles/linux_sysmon/files/inputs.conf
@@ -6,4 +6,4 @@ journalctl-exclude-fields = __MONOTONIC_TIMESTAMP,__SOURCE_REALTIME_TIMESTAMP
 journalctl-filter = _SYSTEMD_UNIT=sysmon.service
 index = unix
 source = Syslog:Linux-Sysmon/Operational
-sourcetype = sysmon_linux
+sourcetype = sysmon:linux
diff --git a/packer/ansible/roles/splunk_server/tasks/main.yml b/packer/ansible/roles/splunk_server/tasks/main.yml
@@ -22,7 +22,7 @@
     - "splunk-machine-learning-toolkit_541.tgz"
     - "splunk-security-essentials_380.tgz"
     - "splunk-add-on-for-sysmon_400.tgz "
-    - "add-on-for-linux-sysmon_104.tgz"
+    - "splunk-add-on-for-sysmon-for-linux_100.tgz"
     - "splunk-add-on-for-amazon-web-services-aws_760.tgz"
     - "splunk-add-on-for-microsoft-office-365_451.tgz"
     - "splunk-add-on-for-amazon-kinesis-firehose_131r7d1d093.tgz"

diff --git a/packer/ansible/roles/sysmon_linux/files/deb_template_inputs.conf b/packer/ansible/roles/sysmon_linux/files/deb_template_inputs.conf
@@ -6,4 +6,4 @@ journalctl-exclude-fields = __MONOTONIC_TIMESTAMP,__SOURCE_REALTIME_TIMESTAMP
 journalctl-filter = _SYSTEMD_UNIT=sysmon.service
 index = unix
 source = Syslog:Linux-Sysmon/Operational
-sourcetype = sysmon_linux
+sourcetype = sysmon:linux