Getting Data In

Where can i get some sample data to test Splunk ITSI Features?

RomeSplunk123
Explorer

Hi I am trying to evaluate Splunk in context of all the features that it has to offer.... I downloaded the demo, but the thing is there is no data for me to test out the features to see how unified dashboard looks like, is there a good reference link where you can point me to where I can get some sample data to infuse into Splunk to test it's ITSI capabilities?

Labels (1)
0 Karma

ericjorgensenjr
Path Finder

The best place to start is to ingest OS logs from the server that you're running Splunk on. Recommend leveraging the integration with Splunk App for Infrastructure, following the instructions here:

If you're running on Linux: https://docs.splunk.com/Documentation/InfraApp/2.2.2/Admin/AddNixAddon

If you're running on Windows: https://docs.splunk.com/Documentation/InfraApp/2.2.2/Admin/AddNixAddon

Then:

https://docs.splunk.com/Documentation/ITSI/4.7.1/SAIInt/Overview

 

Alternatively you could just ingest some data using the add-on for windows (https://splunkbase.splunk.com/app/742/) or add-on for *nix (https://splunkbase.splunk.com/app/742/) and create some sample entities/KPIs/Services from that data

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @RomeSplunk123,

did you tried with Splunk Oxygen?

Ciao.

Giuseppe

0 Karma

RomeSplunk123
Explorer

thanks for responding, do you happen to know where can I try this Splunk Oxygen, is there a link? Also is there ITSI in it or just regular Splunk? @gcusello  would you happen to know?

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @RomeSplunk123,

Splunk Oxygen is a demo environment available only for the Sales Engineers.

I did this certification only to have Oxygen that's a fantastic environment for demos and sees how most products work.

Ciao.

Giuseppe

0 Karma

RomeSplunk123
Explorer

Thank you for answering, question How do i get access to some of these Sales Engineers, to see if i can also... browse the features to see if the features make sense in Oxygen.  Is there partnership program associated with this? If so what are the requirements for it?  Or would I need to get certified to have access?  I

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @RomeSplunk123,

it should be sufficient to take the Sales II certification, but you can ask to your Channel Manager.

Ciao.

Giuseppe

P.S.: if you're italian, there's a Splunk User Group in Rome.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...