topic Re: Looking for Installation instructions for Splunk iSeries app in Installation

Looking for Installation instructions for Splunk iSeries app

tradtshirt — Wed, 17 Jun 2020 17:41:29 GMT

I'm looking for installation instructions on the iSeries app:
http://splunk-base.splunk.com/apps/24097/splunk-for-as400-iseries

Has anybody installed this app?
Is it installed on iSeries posix shell?

Thanks

Re: Looking for Installation instructions for Splunk iSeries app

tradtshirt — Wed, 07 Nov 2012 13:51:44 GMT

Scratch that
I found the install instructions in the CL source . . .

0015.00 /* PROGRAM SETUP INSTRUCTIONS: /
0016.00 / 1) SIGNON TO THE ISERIES SYSTEM USING AN ADMINISTRATOR ID /
0017.00 / E.G. QSECOFR /
0018.00 / 2) CRTLIB LIB(AUDITLIB) AUT(EXCLUDE) */
0019.00 / 3) CRTSRCPF FILE(AUDITLIB/QCLSRC) /
0020.00 / 4) STRSEU SRCFILE(AUDITLIB/QCLSRC) SRCMBR(AUDITPGM) /
0021.00 / COPY THE SOURCE FOR PROGRAM AUDITLIB/AUDITPGM INTO /
0022.00 / THIS SOURCE MEMBER. /
0023.00 / 5) STRSEU SRCFILE(AUDITLIB/QCLSRC) SRCMBR(FTPSCRIPT) /
0024.00 / COPY THE SOURCE FOR FTP SCRIPT AUDITLIB/FTPSCRIPT INTO /
0025.00 / THIS SOURCE MEMBER. /
0026.00 / 6) CRTCLPGM PGM(AUDITLIB/AUDITPGM) SRCFILE(AUDITLIB/QCLSRC) /
0027.00 / SRCMBR(AUDITPGM) TEXT('AUDIT PROGRAM')

Re: Looking for Installation instructions for Splunk iSeries app

dmaislin_splunk — Wed, 07 Nov 2012 14:01:26 GMT

Nothing is installed on the iSeries. You FTP the logs from iSeries to somewhere Splunk can access and then index them with Splunk. Splunk does not have any native software for the iSeries yet. Just install the App on the SearchHead once you have the files indexed.

Re: Looking for Installation instructions for Splunk iSeries app

tradtshirt — Wed, 07 Nov 2012 14:08:31 GMT

Thanks dmaislin_splunk

i had thought I'd found a splunk agent capable of being installed on unix shell on iseries here, but alas no. Could be something the for the splunk roadmap.
still its pretty useful in its current form.

cheers

Re: Looking for Installation instructions for Splunk iSeries app

dmaislin_splunk — Wed, 07 Nov 2012 14:19:05 GMT

Maybe some day we may release a forwarder for ZLinux, but I am unsure of the most current status of that project.

Re: Looking for Installation instructions for Splunk iSeries app

nawneel — Tue, 20 Sep 2016 10:28:15 GMT

@dmaislin
is this not the correct app for as400 - https://splunkbase.splunk.com/app/633/#/overview?

Thanks in advance