How to Install Splunk App For Net App ONTAP

[BCSITS]

SplunkAppForNetAppONTAP - Deploy this app to $SPLUNK_HOME/etc/apps on your SEARCH HEAD only.

Can someone please explain what is the SEARCH HEAD?
And how do we download, Splunk_TA_ONTAP7, and Splunk_SA_ONTAP_KB

I am quite new to Netapp

Thanks

[Kate_Lawrence-G]

A Splunk setup can be distributed so that your search heads (the GUI that you run your searches through) and the indexers (what crunches the data) can be separated out. It can also be an all-in-one solution that does both.

The Splunk App for NetApp ONTAP has 2 main components:

1. It has a search head app. This is the GUI side and has the dashboards you use to view the data. This get's downloaded from http://splunk-base.splunk.com/apps/67764/splunk-app-for-netapp-ontap and can be installed through the manager/app section on the search head
2. Splunk_TA_ONTAP7 is what is called a Technology Addon - it supplies the indexing logic needed to make the data collected (in this case from the NetApp) searchable and useful for the dashboards. It has the props.conf and transforms.conf that are needed to manipulate the data. In a distributed environment this would sit at the indexer, but in an all-in-one solution it can be installed within the apps directory as well.

You need both of these to make the application work correctly.

[Kate_Lawrence-G]

I believe the add-ons come as part of the package - check the /opt/splunk/etc/apps directory and see what's in there?

[BCSITS]

Hi, Thanks for the Info Kate.

I have now installed SplunkApp

but where can i download the SPlunk Addons?
and how do I install them?

appreciate hour help..

Thanks