Prerequisites for Splunk Edge Hub OS
Complete the following prerequisites for Splunk Edge Hub OS.
Onboarding
Request a demo at http://www.edgehubcentral.com/.
Splunk platform
Make sure you're using a Victoria or Classic Experience Splunk Cloud Platform or Splunk Enterprise deployment version 9.0 or higher. To determine which Splunk Cloud platform you're using, see Determine your Splunk Cloud Platform Experience in the Splunk Cloud Platform Admin Manual.
HTTP Event Collector (HEC)
You'll use Splunk Web to connect the Splunk Edge Hub OS to a Splunk platform instance's HTTP Event Collector (HEC).
Splunk Cloud Platform
If you're using Splunk Cloud Platform, HEC is already turned on. See Manage HTTP Event Collector (HEC) tokens in Splunk Cloud Platform in the Splunk Cloud Platform Admin Config Service Manual to learn more about HEC in Splunk Cloud Platform.
Splunk Enterprise
In a distributed deployment, set up the HEC on the heavy forwarder that you'll use as a data collection node.
In a single-instance deployment, set up HEC on the single instance. The single instance will be your data collection node for the Splunk Edge Hub OS.
See Enable HTTP Event Collector on Splunk Enterprise in the Splunk Enterprise Getting Data In manual.
When configuring the HEC, keep in mind the following:
- You can optionally enable SSL.
- Note the port number you select. You'll need it when you configure the HEC endpoint during a later step.
Token authentication
Splunk Edge Hub OS requires token authentication on the Splunk platform instance where you've configured the HEC.
Splunk Cloud Platform
See Manage authentication tokens in Splunk Cloud Platform in the Securing Splunk Cloud Platform manual.
Splunk Enterprise
Enable token authentication in Settings, then Tokens, then Enable token authentication in Splunk Web.
Applications
Splunk Edge Hub OS requires apps on your Splunk platform deployment and an app installed on your mobile device.
Splunk Edge Hub OS requires the following apps on the Splunk platform instance where you've configured the HEC:
- Opt in to using Splunk Secure Gateway, a default app on your Splunk platform. See Get started with Splunk Secure Gateway for more details.
- Install and configure the Splunk App for Edge Hub and AR on the search head and where you've configured the HEC. See Install the Splunk App for Edge Hub and AR for Splunk Edge Hub OS
Splunk Edge Hub OS requires the Splunk Edge Hub mobile app on your mobile device:
- iOS: https://apps.apple.com/jm/app/splunk-edge/id1514426810
- Android: https://play.google.com/store/apps/details?id=com.splunk.android.iot
Next step
After completing the prerequisites, create indexes for the Splunk Edge Hub OS using the Splunk App for Edge Hub. See Create indexes for Splunk Edge Hub OS.
For an overview of installation and configuration steps, see Installation and configuration overview for Splunk Edge Hub OS in the Splunk Edge Hub OS Setup and Configuration Guide.
Installation and configuration overview for Splunk Edge Hub OS | Create indexes for Splunk Edge Hub OS |
This documentation applies to the following versions of Splunk® Edge Hub OS: beta0.10.0, beta0.11.0, beta0.12.0, beta0.15.0, beta1.2, beta1.3.1, beta1.3.2, 1.4.2, 1.5.0, 1.6.0, 1.7.0, 1.8.0, 1.8.1, 1.9.0, 2.0.0
Feedback submitted, thanks!