Splunk® App for Infrastructure

Install and Upgrade Splunk App for Infrastructure

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

System requirements for Splunk App for Infrastructure

Review the following requirements before you deploy Splunk App for Infrastructure (SAI).

Splunk platform version requirements

Except as modified by statements on this page, all Splunk Enterprise system requirements apply to SAI deployments. For more information, see System requirements for use of Splunk Enterprise on-premises.

These are the compatible Splunk platform versions:

Platform Version
Splunk Enterprise
  • 7.2.x
  • 7.3.x
  • 8.0.x
  • 8.1.x
Splunk Cloud
  • 7.2.6
  • 7.2.7
  • 8.0.x
  • 8.1.x

Splunk add-on support and requirements

SAI requires these add-ons:

Add-on Version Description
Splunk Add-on for Infrastructure 2.2.x Handles index creation, props, and transforms. SAI and the Splunk Add-on for Infrastructure are not backward compatible. You must run the same version of the app and add-on.

SAI is compatible with these add-ons:

Add-on Version Description
Splunk Add-on for Amazon Web Services 5.0.x If you want to collect data from AWS CloudWatch, use the Splunk Add-on for Amazon Web Services.
Splunk Add-on for Microsoft Windows 5.0.1, 6.0.0, 7.0.0, 8.0.0 If you are upgrading from an earlier version of SAI, update props for the Splunk Add-on for Infrastructure in props.conf on every indexer and Windows Performance Monitor (perfmon) stanzas in inputs.conf on every universal forwarder sending data from a Windows system. For more information, see Upgrade to a new version of Splunk App for Infrastructure that's monitoring Windows systems.
Splunk OVA for VMware Metrics 4.0.0, 4.1.0 You can deploy a DCN with the Splunk OVA for VMware Metrics or manually convert a heavy forwarder into a DCN. To use the default visualizations in SAI for VMware data you need an ITSI license.
Splunk Add-on for VMware Metrics 4.0.0, 4.1.0 You can deploy a Data Collection Node (DCN) to collect data from VMware vSphere vCenter Servers. To use the default visualizations in SAI for VMware data you need an ITSI license.

Python 3 migration with Splunk Enterprise

On January 1, 2020, Python version 2.x was officially deprecated by the Python Software Foundation. Python packages and tools have ended or are ending support for Python 2, and new Python packages don't support Python 2. To maintain compatibility with the many third party projects that use Python, Splunk has migrated Splunk Cloud and Splunk Enterprise, supported Premium Solutions, and supported Splunkbase apps and add-ons to be compatible with Python 3.7.

Splunk has released Splunk Cloud and Splunk Enterprise versions 8.x to support the migration from Python 2 to Python 3. Splunk has migrated impacted features to Python 3.7, and versions 8.x include both the Python 2.7 and Python 3.7 runtimes, to help customers and developers transition Python in apps from Python 2 to Python 3. Splunk will remove the Python 2.7 runtime altogether in a future release.

If you upgrade to Splunk Enterprise version 8.x, you have to upgrade to SAI version 2.0.0 or later. All SAI versions prior to 2.0.0 are incompatible with Splunk Enterprise version 8.x, even if you use the Python 2.7 runtime in Splunk Enterprise version 8.x. To upgrade to Splunk Enterprise version 8.x, first upgrade to SAI version 2.0.0 or later.

Operating system support for data collection

SAI supports data collection from the following operating systems. For information about operating system support for installation, see Operating system support for installation.

Operating system Data Collection Agent for Metrics Supported version for data collection
Linux/Unix (x86_64 only) Collectd
  • RHEL 6, 7, 8
  • CentOS 6, 7, 8
  • Debian 7, 8, 9, 10
  • Ubuntu 14, 16, 18, 20
  • Fedora 25, 26, 27, 28, 29, 30, 31, 32
  • Solaris 10, 11
  • SUSE Enterprise 15
  • openSUSE 15

There's no support for 32-bit with the easy install script.

Linux/Unix Splunk Add-on for Unix and Linux See, Hardware and software requirements for the Splunk Add-on for Unix and Linux
Windows Splunk Universal Forwarder
  • Windows Server 2012, 2012 R2, 2016, 2019 x86 (64-bit)
  • Windows 10, x86 (64-bit), x86 (32-bit)

There's no support for 32-bit with the easy install script.

Mac OS X Collectd
  • Mac OS X 10.11-10.15

Third-party requirements

If you are collecting metrics data from a *nix host, you must install collectd. SAI is compatible with these versions of collectd:

  • 5.7.x
  • 5.8.x
  • 5.9.x
  • 5.10.x
  • 5.11.x
  • 5.12.x

For more information, see About using collectd.

Supported browsers

SAI supports the following browsers.

Browser Versions
Firefox Latest
Internet Explorer

Version 11

This isn't supported in compatibility mode.

Safari Latest
Chrome Latest

*nix data collection requirements for collectd

You must have administrator privileges to run the easy install script. You can run the script only on compatible operating systems. For more information, see Operating system support for data collection.

For Mac OS X systems, the /usr/local/sbin directory must exist on the system, and you must log in as a user who can write to the directory.

For AWS Linux AMIs, agent-based data collection is not available. For AWS monitoring, see Configure AWS Data Collection in the Administer Splunk App for Infrastructure guide.

You must have these dependencies available:

Operating system type Required dependencies
Linux
  • wget
  • apt-get (Debian and Ubuntu)
  • yum (Redhat, CentOS, and Fedora)
  • zypper (SUSE and openSUSE))
  • Internet access (easy install script)
Mac OS X
  • curl
  • Homebrew
  • Internet access (easy install script)

For more information about how the data collection works, see How the easy install script works in Splunk App for Infrastructure in the Administer Splunk App for Infrastructure guide.

Windows data collection requirements

You must have admin privileges to run the easy install script.

The Windows system must have the following dependencies available:

  • powershell
  • Internet access (easy install script)

For more information about how the data collection works, see How the data collection script works in Splunk App for Infrastructure in the Administer Splunk App for Infrastructure guide.

Kubernetes data collection requirements

You must have permission to run kubectl commands on the system that's running a Kubernetes cluster. You also must have access to each Kubernetes cluster you monitor in SAI.

SAI requires Splunk Connect for Kubernetes version 1.2.0 or 1.3.0 to collect Kubernetes data.

You must run the script on a Linux or Mac OS X system, and it must have the following dependencies available:

  • kubectl
  • Helm
  • wget
  • Internet access (easy install script)

OpenShift data collection requirements

You must install Helm on a local system that's running the OpenShift cluster. Do not install Helm on the cluster.

SAI requires Splunk Connect for Kubernetes version 1.2.0 or 1.3.0 to collect OpenShift data.

To configure data collection, you must have these dependencies on the system you use to configure data collection:

  • OpenShift CLI tool
  • Helm
  • wget
  • Internet access (easy install script)

Docker (no orchestration) data collection requirements

You can monitor Docker containers on a Linux or Mac OS X system that you did not deploy with an orchestration tool like Docker Swarm, Kubernetes, or OpenShift.

These are the Docker requirements:

  • Docker version 1.18 and higher
  • Docker API version 1.20 and higher

You must have these dependencies:

  • libyajl2
  • apt-get (Debian or Ubuntu)
  • yum (CentOS, Redhat, or Fedora)
  • zypper (SUSE or openSUSE)
  • Internet access (easy install script)

VMware data collection requirements

To view the requirements for setting up VMware data collection, see Data collection planning and requirements for the Splunk Add-on for VMware Metrics in the Splunk Add-on for VMware Metrics manual.

Last modified on 03 December, 2020
PREVIOUS
Share data in Splunk App for Infrastructure
  NEXT
SAI compatibility with related apps and add-ons

This documentation applies to the following versions of Splunk® App for Infrastructure: 2.2.2, 2.2.3 Cloud only


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters