How to add data to Splunk App for Infrastructure

To configure data collection, you must be a user with administrator privileges.

Configure data collection to add data to the Splunk App for Infrastructure (SAI) and start monitoring metrics and logs for your hosts. You can collect data from Linux systems, Windows systems, Mac OS X systems, AWS services, Kubernetes clusters, OpenShift clusters, and VMware vCenter Servers.

For information about how data collection works, see How the data collection script works in Splunk App for Infrastructure.

For information about operating system requirements for data collection, see Operating system support for data collection.

Collect data from Linux systems

There are two ways to collect *nix metric and log data in the Splunk App for Infrastructure (SAI). You can use collectd with either the easy install script or manually set up collectd with a universal forwarder. Alternatively, you can collect *nix data with the Splunk Add-on for Unix and Linux installed on the Splunk universal forwarder. For more information, see About Linux/Unix integrations in SAI.

Collect data from Windows systems

To use the easy install script to collect data, see Collect Windows metrics and logs with Splunk App for Infrastructure.

To manually configure data collection, see Manually configure metrics and log collection for a Windows host for Splunk App for Infrastructure.

Collect data from Mac OS X systems

To use the easy install script to collect data, see Collect Mac OS X metrics and logs with Splunk App for Infrastructure.

To manually configure data collection, see

• Manually configure metrics collection on a *nix host for Splunk App for Infrastructure
• Manually configure log collection on a *nix host for Splunk App for Infrastructure

Collect data from AWS services

You can collect AWS data from one AWS account a time. To set up AWS data collection, you will need your AWS account's Key ID, Secret Key, and Region Category. You can collect these data from these AWS services:

• EC2
• EBS
• ELB
• CloudWatch

For more information, see Configure AWS data collection for Splunk App for Infrastructure.

Collect data from Kubernetes clusters

To use the easy install script to collect data, see Collect Kubernetes metrics and logs with Splunk App for Infrastructure.

Collect data from OpenShift clusters

To use the easy install script to collect data, see Collect OpenShift metrics and logs with Splunk App for Infrastructure.

Collect data from Docker containers

You can collect data on Docker containers that were not deployed with an orchestration tool like Docker Swarm, Kubernetes, or OpenShift. Enable Docker monitoring on Linux or Mac OS X hosts that you monitor in SAI.

To enable Docker monitoring when running the easy install script, see one of these topics according to your operating system:

• Linux: Collect Linux/Unix metrics and logs with Splunk App for Infrastructure
• Mac OS X: Collect Mac OS X metrics and logs with Splunk App for Infrastructure

To manually enable Docker monitoring, see Manually configure metrics collection on a *nix host for Splunk App for Infrastructure.

Collect data from VMware vCenter Servers

Collect VMware Vsphere data with the Splunk Add-on for VMware Metrics. To use the default visualizations in SAI for VMware data you need an ITSI license. For more information, see About VMware vSphere integrations in SAI.