All Apps and Add-ons

UCS App, Splunk on Windows

omarlari
Engager

Has anyone get this to work? Does python need to be installed on the Windows Server?

Also, in the readme file it says to perform all of this configuration to the credentials.csv, managers.csv file before installing the application into Splunk...how is that possible? I download the shockwave file and have no options but to install it into Splunk.

Please let me know, looks like a great product!

1 Solution

halr9000
Motivator

Sorry for the horrible delay in answering, I thought I was following the tag, but apparently not.

Splunk ships with Python embedded within the product. Your options are to use that, or to install Python separately. I suggest the former route. The inputs.conf.WINDOWS file shipped with the app have the paths set correctly to work on Windows, and it has been tested.

The app is packaged as an .SPL file which is confusing. I'll be changing that to a tarball/zip for the next release. Regardless, the SPL file extension is actually a gzipped tar file, so on Windows it can be opened easily with 7-zip or your favorite archive software. However, if you install the app from the Splunk web UI, you'll find that the package is placed in $SPLUNK_HOME\etc\apps (e.g. c:\program files\splunk\etc\apps), under the SplunkAppForCiscoUCS. Under there in the appserver/addon folder, as documented in the README, you'll see other apps that you need to move down to etc\apps and configure accordingly.

View solution in original post

0 Karma

halr9000
Motivator

Sorry for the horrible delay in answering, I thought I was following the tag, but apparently not.

Splunk ships with Python embedded within the product. Your options are to use that, or to install Python separately. I suggest the former route. The inputs.conf.WINDOWS file shipped with the app have the paths set correctly to work on Windows, and it has been tested.

The app is packaged as an .SPL file which is confusing. I'll be changing that to a tarball/zip for the next release. Regardless, the SPL file extension is actually a gzipped tar file, so on Windows it can be opened easily with 7-zip or your favorite archive software. However, if you install the app from the Splunk web UI, you'll find that the package is placed in $SPLUNK_HOME\etc\apps (e.g. c:\program files\splunk\etc\apps), under the SplunkAppForCiscoUCS. Under there in the appserver/addon folder, as documented in the README, you'll see other apps that you need to move down to etc\apps and configure accordingly.

0 Karma
Get Updates on the Splunk Community!

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...