I'm trying to get SAI working on my laptop to sort of kick the tires and hopefully install it at work (I don't want to break our production Splunk). I have a Fedora 30 machine with 20G of memory and 1TB of disk.
I ran the easy install on my laptop, so that my laptop will monitor itself. I'm not seeing any entities at all. Here's what I did, as I followed the installation guide for SAI:
I’m going to do the easy install of “Configure Linux/Unix data collection for Splunk App for Infrastructure”
I created an HEC token. I meet the Prerequisites to configure data collection (yum and all that). But under the “HEC token” section, I see my first mention of “collectd”. Hopefully, I’ll learn more about that!
So now go to the SAI user interface.
OK, again following the instructions, it looks like I’m going to run this ginormous one-liner, which I ran and it looked successful, but I never got an entity. Here's what happened:
It did say this during the install, and I’m not sure why. Note that Splunk changed ports for me, I did not enter "y" or anything else:
Checking mgmt port : not available
ERROR: mgmt port  - port is already bound. Splunk needs to use this port.
Would you like to change ports? [y/n]: y
Enter a new mgmt port:
Setting mgmt to port: 8090
The server's splunkd port has been changed.
Checking mgmt port : open
...collectd DID complain about not being able to connect to port 8088, so I edited /etc/connectd.conf and changed the port to 8089 and now it doesn't complain, but I STILL don't see any entities connecting.