All Apps and Add-ons

WIN: Splunk Add-on for Microsoft Windows vs INF: Splunk App for Windows

rchittip
Path Finder

Hi,
I have a requirement to monitor windows servers from Splunk.
However, when look for an app in splunkbase, found two apps for windows. I installed WIN:Splunk Add-on for Microsoft Windows and configured and deployed for my needs.

I'm wondering why two apps for windows monitoring. Can someone explains what is the best fit for windows monitoring among these in Splunk for production. Thanks in Advance!!

Thanks,
Ramu Chittiprolu

Tags (1)
0 Karma
1 Solution

deepashri_123
Motivator

hey rchittip,

The Splunk for Microsoft Windows add-on includes predefined inputs to collect data from Windows systems and maps to normalize the data to the Common Information Model whereas Splunk App for Windows gives you predefined dashboards and alerts .

The various add-ons are used to take different form of data inputs to make it compatible with the predefined dashboard queries.

You can refer the documentation for Splunk App for windows to check the add-ons required and the location for it to be installed.
http://docs.splunk.com/Documentation/MSApp/1.4.3/MSInfra/HowtodeploytheSplunkAppforWindowsInfrastruc...

View solution in original post

0 Karma

deepashri_123
Motivator

hey rchittip,

The Splunk for Microsoft Windows add-on includes predefined inputs to collect data from Windows systems and maps to normalize the data to the Common Information Model whereas Splunk App for Windows gives you predefined dashboards and alerts .

The various add-ons are used to take different form of data inputs to make it compatible with the predefined dashboard queries.

You can refer the documentation for Splunk App for windows to check the add-ons required and the location for it to be installed.
http://docs.splunk.com/Documentation/MSApp/1.4.3/MSInfra/HowtodeploytheSplunkAppforWindowsInfrastruc...

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...