All Apps and Add-ons

UCS App, Splunk on Windows

omarlari
Engager

Has anyone get this to work? Does python need to be installed on the Windows Server?

Also, in the readme file it says to perform all of this configuration to the credentials.csv, managers.csv file before installing the application into Splunk...how is that possible? I download the shockwave file and have no options but to install it into Splunk.

Please let me know, looks like a great product!

1 Solution

halr9000
Motivator

Sorry for the horrible delay in answering, I thought I was following the tag, but apparently not.

Splunk ships with Python embedded within the product. Your options are to use that, or to install Python separately. I suggest the former route. The inputs.conf.WINDOWS file shipped with the app have the paths set correctly to work on Windows, and it has been tested.

The app is packaged as an .SPL file which is confusing. I'll be changing that to a tarball/zip for the next release. Regardless, the SPL file extension is actually a gzipped tar file, so on Windows it can be opened easily with 7-zip or your favorite archive software. However, if you install the app from the Splunk web UI, you'll find that the package is placed in $SPLUNK_HOME\etc\apps (e.g. c:\program files\splunk\etc\apps), under the SplunkAppForCiscoUCS. Under there in the appserver/addon folder, as documented in the README, you'll see other apps that you need to move down to etc\apps and configure accordingly.

View solution in original post

0 Karma

halr9000
Motivator

Sorry for the horrible delay in answering, I thought I was following the tag, but apparently not.

Splunk ships with Python embedded within the product. Your options are to use that, or to install Python separately. I suggest the former route. The inputs.conf.WINDOWS file shipped with the app have the paths set correctly to work on Windows, and it has been tested.

The app is packaged as an .SPL file which is confusing. I'll be changing that to a tarball/zip for the next release. Regardless, the SPL file extension is actually a gzipped tar file, so on Windows it can be opened easily with 7-zip or your favorite archive software. However, if you install the app from the Splunk web UI, you'll find that the package is placed in $SPLUNK_HOME\etc\apps (e.g. c:\program files\splunk\etc\apps), under the SplunkAppForCiscoUCS. Under there in the appserver/addon folder, as documented in the README, you'll see other apps that you need to move down to etc\apps and configure accordingly.

0 Karma
Get Updates on the Splunk Community!

This Week's Community Digest - Splunk Community Happenings [9.26.22]

Get the latest news and updates from the Splunk Community here! Upcoming User Group Events! 👏 Check ...

BSides Splunk 2022 - The Call for Papers is now Open!

TLDR; Main Site: https://bsidessplunk.com CFP Site: https://bsidessplunk.com/cfp CFP Opens: December 15th, ...

Sending Metrics to Splunk Enterprise With the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...