Configure Splunk Linux Add On on Splunk forwarder

ConfigureSplunkLinuxAddOn.sh

## Download splunk linux add on - https://splunkbase.splunk.com/app/833/ 
# Unzip in any temporary directory
tar xfzf splunk-add-on-for-unix-and-linux_521.tgz

# Move the add on to the forwarder apps directory
sudo mv Splunk_TA_nix $SPLUNK_HOME/etc/apps/

# Enable the app
cd $SPLUNK_HOME/etc/apps/Splunk_TA_nix
mkdir local
cp default/inputs.conf local/.
cd local

## update the inputs.conf in local and change the disable=1 to disable=0 for stats that you want splunk to index.
## Add on will use the standard outputs.conf to send the right indexer and index

# restart the forwarder
sudo $SPLUNK_HOME/bin/splunk restart