Monitoring Splunk

Configuring distributed monitoring console without the UI

Isaac_Hailperin
Explorer

I am trying to configure the distributed monitoring console without the UI (for automation purposes). It seems that I have gotten most things right - all instances show up the way I want them to, however they are all marked as "unreachable".

It seems that I must do the step where I provide credentials for the mc host to login to the monitored host. However I cannot figure out what this step actually does.

Also I cannot find anything that hints to the credentials being stored anywhere. So what does this login process actually do, and how can I mimic that bevhaviour for the mc from the commandline/ via config files?

Any insight on how the setup process works behind the scene would be appreciated.

Labels (1)
0 Karma

tej57
Contributor

Hello @Isaac_Hailperin ,

Can you share what steps have you taken so far? That would help understand what is actually missing.


Thanks,
Tejas.

0 Karma
Get Updates on the Splunk Community!

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...