Splunk IT Service Intelligence

Does Splunk Insights for Infrastructure supports Supports Server 2008?

jibin1988
Path Finder

Does SII supports Server 2018? I want to monitor server 2008 r2. Will it support? when i am trying to run the scrip i and getting below error :

Exception setting "SecurityProtocol": "Cannot convert null to type "System.Net.SecurityProtocolType" due to invalid enu
meration values. Specify one of the following enumeration values and try again. The possible enumeration values are "Ss
l3, Tls"."
At line:1 char:575
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]:: <<<< SecurityProto
col = [Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $
web.DownloadFile("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...
")}; [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 }
+ CategoryInfo : InvalidOperation: (:) [], RuntimeException
+ FullyQualifiedErrorId : PropertyAssignmentException

Exception calling "DownloadFile" with "2" argument(s): "The underlying connection was closed: An unexpected error occur
red on a send."
At line:1 char:723
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]::SecurityProtocol =
[Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $web.Do
wnloadFile <<<< ("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...
")}; [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 }
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException

Exception calling "DownloadFile" with "2" argument(s): "The underlying connection was closed: An unexpected error occur
red on a send."
At line:1 char:723
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]::SecurityProtocol =
[Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $web.Do
wnloadFile <<<< ("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...
")}; [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 }
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException

The term '.\install_uf.ps1' is not recognized as the name of a cmdlet, function, script file, or operable program. Chec
k the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:936
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]::SecurityProtocol =
[Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $web.Do
wnloadFile("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...}; [
System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 <<<< }
+ CategoryInfo : ObjectNotFound: (.\install_uf.ps1:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

dagarwal_splunk
Splunk Employee
Splunk Employee

Splunk Insights for Infrastructure uses Splunk Universal Forwarder for Windows data collection. So, as long as Splunk UF is supported and you can run the powershell script to configure it, everything will work.
Here is the supported OS doc for UF:
http://docs.splunk.com/Documentation/Splunk/7.2.0/Installation/Systemrequirements#Windows_operating_...

0 Karma

jibin1988
Path Finder

I got it. Splunk Insights for Infrastructure is supporting windows 2008 server r2. We need to update the powershell 2 to powershell 4. Its working fine.

After updating the powershell try to run the agent installation script. It will work.

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...