I have installed SAI on test environment (standalone Splunk instance on Centos 7) and I added a Windows 10 entity.
The entity does not appear in the UI, then I noticed the indexes em_metrics, em_meta and infra_alerts are not created in the Splunk.
Shouldn't they be created during app installation?
What should I do now?
Those indexes are installed by the Splunk Add-on for Infrastructure, not the app.
View solution in original post
Thank you very much,