About the Windows entity integration in ITSI
The following sections walk through the two ways you can collect Windows data in ITSI. You can either use the data collection script or configure data collection agents manually. For information about data you can collect with this integration, see Windows data you can collect with ITSI. Before you start collecting Windows data, make sure you satisfy the Windows integration requirements. For more information, see Windows integration requirements for ITSI.
Collect Windows metrics and logs with the data collection script in ITSI
The data collection script in ITSI collects both Windows metrics and logs data. To use the data collection script you must have internet access. The data collection script downloads a universal forwarder. If you don't have internet access, configure data collection manually. For more information, see Collect Windows metrics and logs with the data collection script in ITSI.
Manually collect logs and metrics from a Windows host in ITSI
You can manually set up a universal forwarder to collect metrics from a Windows host. Manually configure metrics collection for a host when you meet at least one of these conditions:
- You're collecting data from a host on a closed network with no internet access.
- You already installed a universal forwarder on the host.
- You don't have trusted URLs you can download the required packages from.
If you also want to manually collect log data from a Windows host, see Manually collect logs from a Windows host in ITSI.
If you have problems setting up the Windows entity integration, see Troubleshoot the Windows entity integration in ITSI.
Troubleshoot the Unix and Linux entity integration in ITSI
Windows integration requirements for ITSI
This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.6.0 Cloud only, 4.6.1 Cloud only, 4.6.2 Cloud only, 4.7.0, 4.7.1, 4.7.2, 4.8.0 Cloud only, 4.8.1 Cloud only, 4.9.0, 4.9.1, 4.9.2, 4.9.3, 4.10.0 Cloud only, 4.10.1 Cloud only, 4.10.2 Cloud only