Unable to Perform Setup of Splunk Add-on for Unix and Linux on Cloud Search Heads

Available Languages

Updated:September 29, 2026
Document ID:SPLK045464

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Applicability

Splunk Cloud

Description

Applicability: Splunk Cloud Search Head Splunk Add-On for Unix and Linux

Login fails when trying to add inputs on a cloud search head

Investigation

The setup for Splunk Add-on for Unix and Linux requires creating inputs. Splunk does not support this app setup on a Cloud search head.
You can find more specific information on Splunk Docs. Link below. 


Resolution

Splunk does not support the use of Splunk Add-on for Unix and Linux on the Cloud SH to add inputs and that the app only exists on the SH to provide knowledge objects.

Install this add-on to all search heads where Unix or Linux knowledge management is required. As a best practice, turn add-on visibility off on your search heads to prevent data duplication errors that can result from running inputs on your search heads instead of or in addition to your data collection node.

Additionally, the permissions required to add those inputs - edit_monitor and edit_scripted - are explicitly denied to Cloud platform users and cannot be added.

https://docs.splunk.com/Documentation/AddOns/released/UnixLinux/Install#Where_to_install_this_add-on 

 

Revision History

Revision Publish Date Comments
1.0
29-Sep-2026
Initial Release

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products