Installation

Installation of Dell EMC Isilon Add-on for Splunk: Why are we getting errors?

vipul_devli
New Member

Hi Everyone,

I am writing to you to seek support on configuring Dell EMC Isilon Add-on for Splunk.

  1. Installed app (Dell EMC Isilon Add-on for Splunk Enterprise) in our dev environment in one of our indexer.

The Isilon version used is Isilon OneFS 9.2.1.7

Splunk Version: 8.0.4

2. Is this add-on compatible with Isilon version (9.2.1.7). As per splunkbase documentation for this add-on:

vipul_devli_0-1657861139971.png

 

 

  1. Are the below commands mandatory from Isilon side (As per splunkbase documentation):

vipul_devli_1-1657861139978.png

 

Enabling audit on any of the Isilon storage may increase the resource utilization leading to performance degradation - so we are a but skeptical about it.

3. On set-up page of add-on in splunk, while giving the isilon cluster ip, username and password and clicking on save we were getting the error - "Error occured while authenticating to Server".

vipul_devli_2-1657861139982.png

 

On checking the emc_isilon.log:

vipul_devli_3-1657861139985.png

 

 

Changed the isilonappsetup.conf file with the below settings (verify = False) so to ensure if the above error is because of any certificate issue, then the certificates are not considered.. this was just for a quick testing to make a point on certificates:

vipul_devli_4-1657861139986.png

Can someone help on this?

Thanks in advance

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Set Up More Secure Configurations in Splunk Enterprise With Config Assist

This blog post is part 3 of 4 of a series on Splunk Assist. Click the links below to see the other ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...