Splunk IT Service Intelligence

Does Splunk Insights for Infrastructure supports Supports Server 2008?

jibin1988
Path Finder

Does SII supports Server 2018? I want to monitor server 2008 r2. Will it support? when i am trying to run the scrip i and getting below error :

Exception setting "SecurityProtocol": "Cannot convert null to type "System.Net.SecurityProtocolType" due to invalid enu
meration values. Specify one of the following enumeration values and try again. The possible enumeration values are "Ss
l3, Tls"."
At line:1 char:575
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]:: <<<< SecurityProto
col = [Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $
web.DownloadFile("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...
")}; [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 }
+ CategoryInfo : InvalidOperation: (:) [], RuntimeException
+ FullyQualifiedErrorId : PropertyAssignmentException

Exception calling "DownloadFile" with "2" argument(s): "The underlying connection was closed: An unexpected error occur
red on a send."
At line:1 char:723
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]::SecurityProtocol =
[Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $web.Do
wnloadFile <<<< ("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...
")}; [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 }
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException

Exception calling "DownloadFile" with "2" argument(s): "The underlying connection was closed: An unexpected error occur
red on a send."
At line:1 char:723
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]::SecurityProtocol =
[Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $web.Do
wnloadFile <<<< ("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...
")}; [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 }
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException

The term '.\install_uf.ps1' is not recognized as the name of a cmdlet, function, script file, or operable program. Chec
k the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:936
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]::SecurityProtocol =
[Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $web.Do
wnloadFile("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...}; [
System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 <<<< }
+ CategoryInfo : ObjectNotFound: (.\install_uf.ps1:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

dagarwal_splunk
Splunk Employee
Splunk Employee

Splunk Insights for Infrastructure uses Splunk Universal Forwarder for Windows data collection. So, as long as Splunk UF is supported and you can run the powershell script to configure it, everything will work.
Here is the supported OS doc for UF:
http://docs.splunk.com/Documentation/Splunk/7.2.0/Installation/Systemrequirements#Windows_operating_...

0 Karma

jibin1988
Path Finder

I got it. Splunk Insights for Infrastructure is supporting windows 2008 server r2. We need to update the powershell 2 to powershell 4. Its working fine.

After updating the powershell try to run the agent installation script. It will work.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...