Share data in Splunk App for Infrastructure

When the Splunk App for Infrastructure is deployed on Splunk Enterprise, the Splunk platform sends data to Splunk Inc. ("Splunk"), and uses such data in accordance with the choices you made at the platform level. For information about how to opt in or out, and how the data is collected, stored, and governed, see Share data in Splunk Enterprise.

How data is collected

The Splunk App for Infrastructure enables an internal library to track basic usage and crash information. The library uses browser cookies to track app user visitor uniqueness and sessions, and sends events to Splunk using XHR in JSON format.

What data is collected

The Splunk App for Infrastructure collects the following additional basic usage information:

Component	Description	Example
app.session.deployment.type	Shares whether you are using the Splunk App for Infrastructure or Splunk Insights for Infrastructure and the current page.	{ component: app.session.deployment.type data: { [-] app: splunk_app_infrastructure deploymentType: INSIGHT page: investigate } deploymentID: 373c938c-381a-513e-9769-bce4f8f56cf8 eventID: fb1e80ba-68f3-a8a2-d7e1-21854c4a34f3 experienceID: d38b9c26-0fb5-7225-84fa-3a31d623a2e9 timestamp: 1550274343 userID: e66f93833c1e8d9d08bb0ecf463174a9b37d4beff1835196c0ad1ea36a8d2640 version: 3 visibility: anonymous,support }