Splunk® App for Infrastructure (Legacy)

Administer Splunk App for Infrastructure

Acrobat logo Download manual as PDF


On August 22, 2022, the Splunk App Infrastructure will reach its end of life and Splunk will no longer maintain or develop this product.
Acrobat logo Download topic as PDF

How to add data to Splunk App for Infrastructure

To configure data collection, you must be a user with administrator privileges.

Configure data collection to add data to the Splunk App for Infrastructure (SAI) and start monitoring metrics and logs for your hosts. You can collect data from Linux systems, Windows systems, Mac OS X systems, AWS services, Kubernetes clusters, OpenShift clusters, and VMware vCenter Servers.

For information about how data collection works, see How the data collection script works in Splunk App for Infrastructure.

For information about operating system requirements for data collection, see Operating system support for data collection.

Collect data from Linux systems

There are two ways to collect *nix metric and log data in the Splunk App for Infrastructure (SAI). You can use collectd with either the easy install script or manually set up collectd with a universal forwarder. Alternatively, you can collect *nix data with the Splunk Add-on for Unix and Linux installed on the Splunk universal forwarder. For more information, see About Linux/Unix integrations in SAI.

Collect data from Windows systems

To use the easy install script to collect data, see Collect Windows metrics and logs with Splunk App for Infrastructure.

To manually configure data collection, see Manually configure metrics and log collection for a Windows host for Splunk App for Infrastructure.

Collect data from Mac OS X systems

To use the easy install script to collect data, see Collect Mac OS X metrics and logs with Splunk App for Infrastructure.

To manually configure data collection, see

Collect data from AWS services

You can collect AWS data from one AWS account a time. To set up AWS data collection, you will need your AWS account's Key ID, Secret Key, and Region Category. You can collect these data from these AWS services:

  • EC2
  • EBS
  • ELB
  • CloudWatch

For more information, see Configure AWS data collection for Splunk App for Infrastructure.

Collect data from Kubernetes clusters

To use the easy install script to collect data, see Collect Kubernetes metrics and logs with Splunk App for Infrastructure.

Collect data from OpenShift clusters

To use the easy install script to collect data, see Collect OpenShift metrics and logs with Splunk App for Infrastructure.

Collect data from Docker containers

You can collect data on Docker containers that were not deployed with an orchestration tool like Docker Swarm, Kubernetes, or OpenShift. Enable Docker monitoring on Linux or Mac OS X hosts that you monitor in SAI.

To enable Docker monitoring when running the easy install script, see one of these topics according to your operating system:

To manually enable Docker monitoring, see Manually configure metrics collection on a *nix host for Splunk App for Infrastructure.

Collect data from VMware vCenter Servers

Collect VMware Vsphere data with the Splunk Add-on for VMware Metrics. To use the default visualizations in SAI for VMware data you need an ITSI license. For more information, see About VMware vSphere integrations in SAI.

Last modified on 10 August, 2020
PREVIOUS
About the Splunk App for Infrastructure
  NEXT
How the easy install script works in Splunk App for Infrastructure

This documentation applies to the following versions of Splunk® App for Infrastructure (Legacy): 2.2.0 Cloud only, 2.2.1, 2.2.3 Cloud only, 2.2.4, 2.2.5


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters