Install the Splunk Add-on for Nagios Core on a Splunk Cloud deployment

Install on your Splunk Cloud deployment using self-service

Install an add-on on search heads and indexers in a Splunk Cloud deployment using the self-service app install process.

In Splunk Cloud deployments, inputs must be configured on forwarders under your control.

1. In the Splunk Web home page, click the gear icon next to Apps.
2. Click Install Apps.
3. Select Install to install the add-on. If the add-on that you want is not listed, or if the add-on indicates self-service installation is not supported, contact Splunk Support.
4. Complete the installation. When you install an add-on with declared dependencies, Splunk Cloud automatically resolves its dependencies through Splunkbase. To learn more about declaring dependencies, see the Splunk Packaging Toolkit

Distributed deployment information

Unless otherwise noted, all supported add-ons can be safely installed to all tiers of a distributed Splunk platform deployment. See Where to install Splunk add-ons in Splunk Add-ons for more information.

Use the following tables to determine where and how to install this add-on in a distributed deployment of Splunk Enterprise that you use to get your data into your Splunk Cloud deployment.

Splunk platform instance type	Supported	Required	Actions required / Comments
Search Heads	Yes	Yes	Install this add-on to all search heads where Nagios Core knowledge management is required.
Indexers	Yes	Conditional	Not required if you use heavy forwarders to collect all data. Required if you use universal forwarders to collect log data.
Heavy Forwarders	Yes	See comments	To collect NDOUtils data, you must use Splunk DB Connect on a search head or heavy forwarder. You can collect log data using a universal or light forwarder installed directly on the machines running Nagios Core.
Universal Forwarders	Yes	See comments	Supported for collecting log data only. The forwarder collecting your log data must be installed on the same machine as your Nagios Core instance.

Distributed deployment feature compatibility

This table describes the compatibility of this add-on with Splunk distributed deployment features.

Distributed deployment feature	Supported	Actions required
Search Head Clusters	Yes	You can install this add-on on a search head cluster for all search-time functionality, but configure inputs on forwarders to avoid duplicate data collection. Before you install this add-on to a cluster, remove the eventgen.conf file and all files in the samples folder.
Indexer Clusters	Yes	Before you install this add-on to a cluster, remove the eventgen.conf file and all files in the samples folder.
Deployment Server	No	Supported for deploying unconfigured add-ons only. Using a deployment server to deploy the configured add-on to multiple forwarders acting as data collectors causes duplication of data. The add-on uses the credential vault to secure your credentials, and this credential management solution is incompatible with the deployment server.

Installation walkthroughs

The Splunk Add-Ons manual includes an Installing add-ons guide that helps you successfully install any Splunk-supported add-on to your Splunk platform.

For a walkthrough of the installation procedure, follow the link that matches your deployment scenario:

• Splunk Cloud