UCS App, Splunk on Windows

[omarlari]

Has anyone get this to work? Does python need to be installed on the Windows Server?

Also, in the readme file it says to perform all of this configuration to the credentials.csv, managers.csv file before installing the application into Splunk...how is that possible? I download the shockwave file and have no options but to install it into Splunk.

Please let me know, looks like a great product!

[halr9000 · Accepted solution]

Sorry for the horrible delay in answering, I thought I was following the tag, but apparently not.

Splunk ships with Python embedded within the product. Your options are to use that, or to install Python separately. I suggest the former route. The inputs.conf.WINDOWS file shipped with the app have the paths set correctly to work on Windows, and it has been tested.

The app is packaged as an .SPL file which is confusing. I'll be changing that to a tarball/zip for the next release. Regardless, the SPL file extension is actually a gzipped tar file, so on Windows it can be opened easily with 7-zip or your favorite archive software. However, if you install the app from the Splunk web UI, you'll find that the package is placed in $SPLUNK_HOME\etc\apps (e.g. c:\program files\splunk\etc\apps), under the SplunkAppForCiscoUCS. Under there in the appserver/addon folder, as documented in the README, you'll see other apps that you need to move down to etc\apps and configure accordingly.