Install and Use the Splunk App for Windows

 


About the Splunk Technology Add-on (TA) for Windows

This documentation does not apply to the most recent version of WindowsApp. Click here for the latest version.

About the Splunk Technology Add-on (TA) for Windows

Important: The latest version of the Splunk TA for Windows is 4.6.1. To read about the latest version of the Splunk TA for Windows, review version 4.6.1 of "About the Splunk Technology Add-on (TA) for Windows."

The Splunk Technology Add-on (TA) for Windows is a stripped-down version of the Splunk App for Windows. It is similar to the full app in that it provides data inputs for Windows system management. Unlike the full app, it does not contain any dashboards, reports, or saved searches. Its only user interface is a configuration panel that lets you enable or disable the various included inputs.

You can install the Splunk TA for Windows on a forwarder to send data from any number of Windows machines to a central Splunk indexer running the full app. You can also use the TA to provide data for other apps.

How does it work?

The Splunk TA for Windows runs on top of a Splunk indexer or forwarder and, like the full app, gathers various system metrics using a number of data inputs. These include but are not limited to:

  • Hardware information such as CPU type and count; available hard drives; network interface cards, count, and memory, as well as CPU statistics (via performance monitoring inputs).
  • Disk information such as available disk space and associated input/output statistics for devices and partitions (via performance monitoring inputs).
  • Network information including information about the configured network interfaces, connections, and TCP/UDP transfer statistics (using performance monitoring inputs).
  • User statistics including number of logins per account, longest active sesions, and security-related information.

How to get the Splunk TA for Windows

Download the Splunk TA for Windows from Splunkbase.

This documentation applies to the following versions of WindowsApp: 4.5.1 , 4.5.2 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!