All Apps and Add-ons

How to navigate SCOM add-on configuration?



I have installed the SCOM app (version 430) on my Splunk Heavy Forwarder (903)

The Windows SCOM infrastructure exists  of one managementgroup with 2 management servers.

managementgroup = SC-PROD consisting of 2 management SC-PRD1 and SC-PRD2
The reason for this, is when server 1 is down, data is still collected thru the second node.

I have configured  the managemt servers in the Splunk SCOM app.

I have only to option to connect to the management servers and not to a group.
I connect with  a URL , with a Service acount that exist on the server

My problem is that i get double data, from both managemtn servers.

I am looking for a smart way to connect, like a cluster

Has anybody experience and advise in this scenario?

Any advise is appriceated



Labels (1)
0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...