All Apps and Add-ons

UCS App, Splunk on Windows

omarlari
Engager

Has anyone get this to work? Does python need to be installed on the Windows Server?

Also, in the readme file it says to perform all of this configuration to the credentials.csv, managers.csv file before installing the application into Splunk...how is that possible? I download the shockwave file and have no options but to install it into Splunk.

Please let me know, looks like a great product!

1 Solution

halr9000
Motivator

Sorry for the horrible delay in answering, I thought I was following the tag, but apparently not.

Splunk ships with Python embedded within the product. Your options are to use that, or to install Python separately. I suggest the former route. The inputs.conf.WINDOWS file shipped with the app have the paths set correctly to work on Windows, and it has been tested.

The app is packaged as an .SPL file which is confusing. I'll be changing that to a tarball/zip for the next release. Regardless, the SPL file extension is actually a gzipped tar file, so on Windows it can be opened easily with 7-zip or your favorite archive software. However, if you install the app from the Splunk web UI, you'll find that the package is placed in $SPLUNK_HOME\etc\apps (e.g. c:\program files\splunk\etc\apps), under the SplunkAppForCiscoUCS. Under there in the appserver/addon folder, as documented in the README, you'll see other apps that you need to move down to etc\apps and configure accordingly.

View solution in original post

0 Karma

halr9000
Motivator

Sorry for the horrible delay in answering, I thought I was following the tag, but apparently not.

Splunk ships with Python embedded within the product. Your options are to use that, or to install Python separately. I suggest the former route. The inputs.conf.WINDOWS file shipped with the app have the paths set correctly to work on Windows, and it has been tested.

The app is packaged as an .SPL file which is confusing. I'll be changing that to a tarball/zip for the next release. Regardless, the SPL file extension is actually a gzipped tar file, so on Windows it can be opened easily with 7-zip or your favorite archive software. However, if you install the app from the Splunk web UI, you'll find that the package is placed in $SPLUNK_HOME\etc\apps (e.g. c:\program files\splunk\etc\apps), under the SplunkAppForCiscoUCS. Under there in the appserver/addon folder, as documented in the README, you'll see other apps that you need to move down to etc\apps and configure accordingly.

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...