Post installation setup

Post installation setup

After installing Splunk for WebSphere in your environment, on the search head, run the App and run the following saved searches so that associated dashboards populate correctly:

Logs are stored in the default WAS directory structure

If your logs are stored in the default WAS directory structure, then do the following:

In the Views menu, select Saved Searches:

1. Run setup_dropdown.
2. Run setup_log. Run this search only when you collect log data stored within the WAS default structure.

Logs are stored in the default WAS directory structure and in other locations

If your logs are stored in the default WAS directory structure and in other locations, then do the following:

In the Views menu, select Saved Searches:

1. Run setup_dropdown.
2. Run cell_node_server_host_path if you store your log data outside the default WAS directory structure.
3. ssh onto your search head and create a local directory in $SPLUNK_HOME/etc/apps/splunk_app_was/ if it does not already exist.
4. Copy $SPLUNK_HOME/etc/apps/splunk_app_was/default/data to $SPLUNK_HOME/etc/apps/splunk_app_was/local/data.
5. Rename all <xyz>_logs_otherpath.xml to <xyz>.xml to use the cell_node_server_host_path lookup file.
6. Restart Splunk on the search head.

• Was this topic useful?
• Post a comment