Installation

How to find out what we selected on installation of Splunk when it comes to sending data to Splunk?

AndreaSimon
New Member

We inherited Splunk from another team and my leadership wants to know if when Splunk was installed, if we opted out of sending information to Splunk. Is there a way to find out what the original installer selected for this option? I have not installed splunk so I am unsure if it even asks you if you want to opt out of sending splunk information to them.

Labels (1)
0 Karma

pwilliams_splun
Splunk Employee
Splunk Employee

I found this in the docs for 7.1.1:

The instrumentation feature adds an
internal index and can increase disk
space usage (Originally introduced in
version 6.5)

The instrumentation feature of Splunk
Enterprise, which lets you share
Splunk Enterprise performance
statistics with Splunk after you opt
in, includes a new internal index
which can cause disk space usage to
rise on hosts that you upgrade. You
can opt out of sharing performance
data by following the instructions at
Share data in Splunk Enterprise in the
Admin Manual.

It appears that if you opt-in, since version 7.0, you will send license usage data by default.

0 Karma

pradeepkumarg
Influencer

Go to settings - > instrumentation

Click on the settings icon next to usage data to see what is turned on.

More details here
http://docs.splunk.com/Documentation/Splunk/7.1.1/Admin/Shareperformancedata

0 Karma

AndreaSimon
New Member

I should have said this in the original post, we are on 6.3.3. I don't have Settings -> Instrumentation when logged in as admin.

0 Karma

pradeepkumarg
Influencer

Documentation says "For the usage data logs to be created and available, your search heads, indexers, and cluster master must be running Splunk Enterprise version 6.5.0 or later."
So it might be a case that there is no collection prior to 6.5. I could be wrong.

0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...