Splunk Integration with HPE Systems Insight Manager

[ansif]

Anyone had experience in integrating Splunk with HPE Systems Insight Manager?

Or can anyone help on the possibility of forwarding data from HPE SIM to splunk?

[DavidHourani]

Hi @ansif, have you tried syslog ? This is the easiest way to get the logs out of SIM and into Splunk.

[ansif]

Not tried but it is what I decided at first. But checking whether any other method that I can pull data.

The environment is small and a syslog server is only required for SIM. If we have any other methods,we can avoid using syslog server.

[DavidHourani]

Nothing available on Splunk base if that's what you're looking for... so you're on the right path you should go for syslog.

you can always read syslog directly from Splunk if it's a small environment using a tcp input. But I would recommend sending your syslog data to a syslog server, write the data to files there then forward it to Splunk using a UF. By doing so you would isolate Splunk from Syslog and it would make things easier to troubleshoot.