System requirements for Splunk App for Infrastructure

Review the following requirements before you deploy Splunk App for Infrastructure (SAI).

Splunk platform version requirements

Except as modified by statements on this page, all Splunk Enterprise system requirements apply to SAI deployments. For more information, see System requirements for use of Splunk Enterprise on-premises.

These are the compatible Splunk platform versions:

Platform	Version
Splunk Enterprise	7.2.x 7.3.x 8.0.x
Splunk Cloud	7.2.6 7.2.7 8.0.x

Splunk add-on support and requirements

SAI requires these add-ons:

Add-on	Version	Description
Splunk Add-on for Infrastructure	2.0.x	Handles index creation, props, and transforms. SAI and the Splunk Add-on for Infrastructure are not backward compatible. You must run the same version of the app and add-on.

SAI is compatible with these add-ons:

Add-on	Version	Description
Splunk Add-on for Amazon Web Services	5.0.0	If you want to collect data from AWS CloudWatch, use the Splunk Add-on for Amazon Web Services.
Splunk Add-on for Microsoft Windows	5.0.1, 6.0.0	If you are upgrading from an earlier version of SAI, update props for the Splunk Add-on for Infrastructure in props.conf on every indexer and Windows Performance Monitor (perfmon) stanzas in inputs.conf on every universal forwarder sending data from a Windows system. For more information, see Upgrade to a new version of Splunk App for Infrastructure that's monitoring Windows systems.
Splunk VMware OVA for ITSI	1.0.0, 1.1.0, 1.1.1	SAI uses this OVA for VMware integrations. If you want to monitor VMware data, you have to have an ITSI license.

Python 3 migration with Splunk Enterprise

On January 1, 2020, the Python Software Foundation will no longer support Python version 2.x. Existing Python packages and tools will end support for Python 2, and new Python packages won't support Python 2. To maintain compatibility with the many third party projects that use Python, Splunk will migrate Splunk Enterprise, supported Premium Solutions, and supported Splunkbase apps and add-ons to Python 3.7 compatibility.

Splunk Enterprise version 8.0.0 supports the migration from Python 2 to Python 3 by including both the Python 2.7 and Python 3.7 runtimes. Splunk will remove the Python 2.7 runtime altogether in a future release. For more information about the Python 3 migration, see Python 3 migration with the Splunk platform.

If you upgrade to Splunk Enterprise version 8.0.0, you have to upgrade to SAI version 2.0.0. All SAI versions prior to 2.0.0 are incompatible with Splunk Enterprise version 8.0.0, even if you use the Python 2.7 runtime in Splunk Enterprise version 8.0.0. To upgrade to Splunk Enterprise version 8.0.0, first upgrade to SAI version 2.0.0.

Operating system support for data collection

SAI supports data collection from the following operating systems. For information about operating system support for installation, see Operating system support for installation.

Operating system	Supported version for data collection
Linux/Unix	RHEL 6, 7 CentOS 6, 7 Debian 7, 8, 9, 10 Ubuntu 14, 16, 18.04, 18.10, 19 Fedora 25, 26, 27, 28, 29, 30 Solaris 10, 11 (x86_64 only) SUSE Enterprise 12.3, 12.4, 15 openSUSE 42.3, 15.0, 15.1 There's no support for 32-bit with the easy install script.
Windows	Windows Server 2012, Server2012 R2, Server 2016, x86 (64-bit) Windows 10, x86 (64-bit), x86 (32-bit) There's no support for 32-bit with the easy install script.
Mac OS X	Mac OS X 10.11-10.14

Third-party requirements

If you are collecting metrics data from a *nix host, you must install collectd. SAI is compatible with these versions of collectd:

• 5.7.x
• 5.8.x

For more information, see About using collectd.

Supported browsers

SAI supports the following browsers.

Browser	Versions
Firefox	Latest
Internet Explorer	Version 11 This isn't supported in compatibility mode.
Safari	Latest
Chrome	Latest

*nix data collection requirements

You must have administrator privileges to run the easy install script. You can run the script only on compatible operating systems. For more information, see Operating system support for data collection.

For Mac OS X systems, the /usr/local/sbin directory must exist on the system, and you must log in as a user who can write to the directory.

For AWS Linux AMIs, agent-based data collection is not available. For AWS monitoring, see Configure AWS Data Collection in the Administer Splunk App for Infrastructure guide.

You must have these dependencies available:

Operating system type	Required dependencies
Linux	wget apt-get (Debian and Ubuntu) yum (Redhat, CentOS, and Fedora) zypper (SUSE and openSUSE)) Internet access (easy install script)
Mac OS X	curl Homebrew Internet access (easy install script)

For more information about how the data collection works, see How the easy install script works in Splunk App for Infrastructure in the Administer Splunk App for Infrastructure guide.

Windows data collection requirements

You must have admin privileges to run the easy install script.

The Windows system must have the following dependencies available:

• powershell
• Internet access (easy install script)

For more information about how the data collection works, see How the data collection script works in Splunk App for Infrastructure in the Administer Splunk App for Infrastructure guide.

Kubernetes data collection requirements

You must have permission to run kubectl commands on the system that's running a Kubernetes cluster. You also must have access to each Kubernetes cluster you monitor in SAI.

SAI requires Splunk Connect for Kubernetes version 1.2.0 to collect Kubernetes data.

You must run the script on a Linux or Mac OS X system, and it must have the following dependencies available:

• kubectl
• Helm
• wget
• Internet access (easy install script)

OpenShift data collection requirements

You must install Helm on a local system that's running the OpenShift cluster. Do not install Helm on the cluster.

SAI requires Splunk Connect for Kubernetes version 1.2.0 to collect OpenShift data.

To configure data collection, you must have these dependencies on the system you use to configure data collection:

• OpenShift CLI tool
• Helm
• wget
• Internet access (easy install script)

Docker (no orchestration) data collection requirements

You can monitor Docker containers on a Linux or Mac OS X system that you did not deploy with an orchestration tool like Docker Swarm, Kubernetes, or OpenShift.

These are the Docker requirements:

• Docker version 1.18 and higher
• Docker API version 1.20 and higher

You must have these dependencies:

• libyajl2
• apt-get (Debian or Ubuntu)
• yum (CentOS, Redhat, or Fedora)
• zypper (SUSE or openSUSE)
• Internet access (easy install script)

VMware data collection requirements

To view the requirements for setting up VMware data collection, see VMware data collection planning and requirements in the Install and Upgrade Splunk App for Infrastructure guide.