Register your mobile device to a Splunk instance

Register your mobile device or Apple TV in Splunk Cloud Gateway to connect to Splunk Enterprise or Splunk Cloud instances. Or, you can register your mobile device to a Phantom instance.

The Connected Experiences apps support LDAP and local Splunk accounts. The Connected Experiences apps do not support SAML authentication.

Prerequisites

• If you're registering to a Splunk Enterprise or Splunk Cloud instance, an admin must install Splunk Cloud Gateway on the search head.
• If you're registering to a Phantom instance, an admin must enable the mobile feature in the Administration page.
• The Connected Experiences app you're using is enabled in the Configure tab of Splunk Cloud Gateway by an admin.
• Have the cloudgateway role. See Configure Splunk Cloud Gateway and dashboard permissions.
• Install a Connected Experiences app on your device.

Register a device with authentication code using Splunk Cloud Gateway

Any user with the cloudgateway role can register a device. You do not need the admin role to register a device. Devices with a Connected Experiences app installed have a registration code in the app.

1. Log in to Splunk Cloud Gateway.
2. On the Register tab in Splunk Cloud Gateway, enter the 10-digit code provided by the mobile device or Apple TV.
3. Name the device.
4. Click Register.
5. Ensure that the confirmation code matches the confirmation code on the device.
6. Log in with your Splunk Enterprise credentials to complete registration.

Register your device in the Splunk Mobile app with login credentials

If your admin set up Mobile Device Management (MDM) and in-app device registration, you can select from multiple Splunk instances and enter your instance login credentials to register your device. This feature is currently available for only Splunk Mobile.

MDM allows admins to scale and further secure their Splunk Mobile deployment. To learn more about in-app registration, see About Mobile Device Management with Splunk Mobile.

Prerequisites

• Download Splunk Mobile for iOS or Download Splunk Mobile for Android.
• Your admin has set up MDM and in-app registration.

For admin set up, see Set up Mobile Device Management for iOS devices or Set up Mobile Device Management for Android devices.

In-app registration for iOS users

Follow these steps to register your iOS device in the Splunk Mobile app:

1. In the Splunk Mobile app, tap the Splunk instance that you want to register to.
2. Enter your Splunk instance credentials to register.

Alternatively, tap Register with Code to register using a provided authentication code and Splunk Cloud Gateway.

In-app registration for Android users

If you've already registered to a Splunk instance using the authentication code, you must to unregister from the one you're currently using before you can register to an instance in the Splunk Mobile app.

Follow these steps to register your device in the Splunk Mobile app:

1. In the Splunk Mobile app, tap the Splunk instance that you want to register to.
2. Enter your Splunk instance credentials to register.

Alternatively, tap Register with Code to register using a provided authentication code and Splunk Cloud Gateway.

Register to multiple Splunk instances

You can get data from multiple Splunk Enterprise instances with multi-instance registration.

1. Tap the Cloud Gateway ID dropdown arrow.
2. Tap Add New Instance.
3. Follow the same registration steps as you would when you normally register your device.

To navigate between Splunk instances in the Splunk Mobile app, tap the Cloud Gateway ID dropdown and select the instance that you want to view data from.

The Cloud Gateway ID is randomly generated when you first launch Splunk Cloud Gateway. You can define this Cloud Gateway ID in cloudgateway.conf to easily identify your Splunk instances. See Configure cloudgateway.conf in Install and Administer Splunk Cloud Gateway.

Unregister a device

You can unregister a device in Splunk Cloud Gateway or in the app on the device.

Here's how to unregister a device in Splunk Cloud Gateway.

1. Select the Devices tab in Splunk Cloud Gateway.
2. Next to device you want to remove, click Remove.
3. Click Remove.

Here's how to unregister a device in a Connected Experiences mobile app.

1. Tap the Cloud Gateway ID dropdown arrow.
2. Tap Edit.
3. Tap the X button next to the instance you want to unregister from.
4. Tap Unregister to confirm.

Register to a Phantom instance

To connect your device to a Phantom instance, register your mobile device using the authentication code in Splunk Phantom in Name > Account Settings > Mobile Device Registration.