All Apps and Add-ons
Highlighted

How to set up the Kafka Messaging Modular Input in a Splunk 6.2.4 search head clustering environment?

Path Finder

I'm trying to get this set up, but I'm a little mixed up... the directions mention:

Configuration

As this is a Modular Input , you can then configure your Kafka inputs via Manager->Data Inputs->Kafka. The field entry should be straightforward and intuitive for anyone with basic experience with Kafka / Zookeeper.

But I'm not seeing this as an option as we will need to distribute the app out to a forwarder and the app doesn't come with an inputs.conf or an inputs.conf.spec for a reference. I tried looking at this through the GUI on my Search Head, but there was also no option for a kafka input. I'm running Search Head Clustering which I assume is the issue. I'm not exactly sure what is needed, but I could certainly be missing something easy. Can anyone point me in the right direction?

Running 6.2.4

0 Karma
Highlighted

Re: How to set up the Kafka Messaging Modular Input in a Splunk 6.2.4 search head clustering environment?

Ultra Champion

In a distributed environment , you should not install it on a SH / SH Cluster.

It certainly does come with with an inputs.conf.spec , otherwise it would never work.

$SPLUNKHOME/etc/apps/kafkata/README/inputs.conf.spec

alt text

View solution in original post

Highlighted

Re: How to set up the Kafka Messaging Modular Input in a Splunk 6.2.4 search head clustering environment?

Path Finder

D'oh! Thanks Damien!

0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.