All Apps and Add-ons

Manually configuring Splunk App for Infrastructure

juliennerocafor
New Member

Hello, I have a working Splunk Enterprise and Splunk Universal Forwarder. I am using 2 different CentOS VM Instance. I can successfully forward logs from UF to SE. I can also do search in here. Although I wanted to do metrics using Splunk App for infrastructure. I'm quite new to splunk and kind of a bit confused on this part of installation.

I installed Splunk App in SE, then installed the Add-on on both SE and UF. I tried the automatic installed using the generated linux command but unfortunately, after downloading that.. my SE Entities are still empty. I've been trying these so many times so now I'm just trying to install in manually.

I am following this: https://docs.splunk.com/Documentation/InfraApp/2.0.3/Admin/ManualInstalLinuxUF. Although I wanted to ask if I need to install again a separate UF from this SAI basing from step 1? or the previous step that I did is already enough? (My currently working SE and UF).

Furthermore, where should I alter the inputs.conf and outputs.conf? Should it be in the existing UF, additional UF or to the existing SE?

I've been struggling with this for quite some time now.. thank you in advance for any help!

0 Karma
Get Updates on the Splunk Community!

New This Month in Splunk Observability Cloud - Metrics Usage Analytics, Enhanced K8s ...

The latest enhancements across the Splunk Observability portfolio deliver greater flexibility, better data and ...

Alerting Best Practices: How to Create Good Detectors

At their best, detectors and the alerts they trigger notify teams when applications aren’t performing as ...

Discover Powerful New Features in Splunk Cloud Platform: Enhanced Analytics, ...

Hey Splunky people! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2408. In this ...