Latest version of the add-on installed on Splunk 6.6.3, any guidance would be appreciated
I've just installed the IIS Add-on and when launching the app i get "404 not found" "Page not found!"
Really helpful, Thank you rpille!
That add-on isn't meant to be visible in Splunk Web, so that's why you're seeing that. This is covered in docs here: http://docs.splunk.com/Documentation/AddOns/released/MSIIS/Troubleshoot#Cannot_launch_add-on
To turn visibility off for this add-on:
1. Go to Apps > Manage Apps.
2. Find the row for the IIS add-on and click Edit properties.
3. Under Visible, choose No, then click Save.
Thanks for your guidance rpille. How do I view the app if I can't launch it from Splunk Web?
Hi Nathan,
There aren't any dashboards or configuration screens in the add-on itself that you can view.
Instead, install it on your search heads and indexers and then don't worry about it again -- it just needs to be present there to do work behind the scenes for the data that comes in.
To collect the data with this add-on, install the add-on on a forwarder that is installed directly on your Microsoft IIS server, and then follow these directions to configure the input: http://docs.splunk.com/Documentation/AddOns/released/MSIIS/Setupaddon.
If you are just doing a POC and you don't have a distributed Splunk platform deployment, you can just install a full Splunk Enterprise instance directly on the Microsoft IIS server, install the add-on on that, and then do everything right there.
Once you have the data coming in, you can add this add-on's three prebuilt panels to a dashboard to kickstart any visualizations you want to make. The instructions for accessing an add-on's prebuilt panels are here: http://docs.splunk.com/Documentation/AddOns/released/Overview/Prebuiltpanels