System requirements for Splunk App for Infrastructure

Review the following requirements before you deploy Splunk App for Infrastructure (SAI).

Splunk platform version requirements

Except as modified by statements on this page, all Splunk Enterprise system requirements apply to SAI deployments. For more information, see System requirements for use of Splunk Enterprise on-premises.

These are the compatible Splunk platform versions:

Platform	Version
Splunk Enterprise	7.2.x 7.3.x 8.0.x 8.1.x 8.2.x
Splunk Cloud	7.2.6 7.2.7 8.0.x 8.1.x 8.2.x

Splunk add-on support and requirements

SAI requires these add-ons:

Add-on	Version	Description
Splunk Add-on for Infrastructure	2.2.x	Handles index creation, props, and transforms. SAI and the Splunk Add-on for Infrastructure are not backward compatible. You must run the same version of the app and add-on.

SAI is compatible with these add-ons:

Add-on	Version	Description
Splunk Add-on for Amazon Web Services	5.0.x, 5.1.x	If you want to collect data from AWS CloudWatch, use the Splunk Add-on for Amazon Web Services.
Splunk Add-on for Microsoft Windows	5.0.1, 6.0.0, 7.0.0, 8.0.0, 8.1.x	If you are upgrading from an earlier version of SAI, update props for the Splunk Add-on for Infrastructure in props.conf on every indexer and Windows Performance Monitor (perfmon) stanzas in inputs.conf on every universal forwarder sending data from a Windows system. For more information, see Upgrade to a new version of Splunk App for Infrastructure that's monitoring Windows systems.
Splunk OVA for VMware Metrics	4.0.0, 4.1.0	You can deploy a DCN with the Splunk OVA for VMware Metrics or manually convert a heavy forwarder into a DCN. To use the default visualizations in SAI for VMware data you need an ITSI license.
Splunk Add-on for VMware Metrics	4.0.0, 4.1.0	You can deploy a Data Collection Node (DCN) to collect data from VMware vSphere vCenter Servers. To use the default visualizations in SAI for VMware data you need an ITSI license.

Python 3 migration with Splunk Enterprise

On January 1, 2020, Python version 2.x was officially deprecated by the Python Software Foundation. Python packages and tools have ended or are ending support for Python 2, and new Python packages don't support Python 2. To maintain compatibility with the many third party projects that use Python, Splunk has migrated Splunk Cloud and Splunk Enterprise, supported Premium Solutions, and supported Splunkbase apps and add-ons to be compatible with Python 3.7.

Splunk has released Splunk Cloud and Splunk Enterprise versions 8.x to support the migration from Python 2 to Python 3. Splunk has migrated impacted features to Python 3.7, and versions 8.x include both the Python 2.7 and Python 3.7 runtimes, to help customers and developers transition Python in apps from Python 2 to Python 3. Splunk will remove the Python 2.7 runtime altogether in a future release.

If you upgrade to Splunk Enterprise version 8.x, you have to upgrade to SAI version 2.0.0 or later. All SAI versions prior to 2.0.0 are incompatible with Splunk Enterprise version 8.x, even if you use the Python 2.7 runtime in Splunk Enterprise version 8.x. To upgrade to Splunk Enterprise version 8.x, first upgrade to SAI version 2.0.0 or later.

Operating system support for data collection

SAI supports data collection from the following operating systems. For information about operating system support for installation, see Operating system support for installation.

Operating system	Data Collection Agent for Metrics	Supported version for data collection
Linux/Unix (x86_64 only)	Collectd	RHEL 6, 7, 8 CentOS 6, 7, 8 Debian 7, 8, 9, 10 Ubuntu 14, 16, 18, 20 Fedora 25, 26, 27, 28, 29, 30, 31, 32 Solaris 10, 11 SUSE Enterprise 15 openSUSE 15 There's no support for 32-bit with the easy install script.
Linux/Unix	Splunk Add-on for Unix and Linux	See, Hardware and software requirements for the Splunk Add-on for Unix and Linux
Windows	Splunk Universal Forwarder	Windows Server 2012, 2012 R2, 2016, 2019 x86 (64-bit) Windows 10, x86 (64-bit), x86 (32-bit) There's no support for 32-bit with the easy install script.
Mac OS X	Collectd	Mac OS X 10.11-10.15

Third-party requirements

If you are collecting metrics data from a *nix host, you must install collectd. SAI is compatible with these versions of collectd:

• 5.7.x
• 5.8.x
• 5.9.x
• 5.10.x
• 5.11.x
• 5.12.x

For more information, see About using collectd.

Supported browsers

SAI supports the following browsers.

Browser	Versions
Firefox	Latest
Internet Explorer	Version 11 This isn't supported in compatibility mode.
Safari	Latest
Chrome	Latest

*nix data collection requirements for collectd

You must have administrator privileges to run the easy install script. You can run the script only on compatible operating systems. For more information, see Operating system support for data collection.

For Mac OS X systems, the /usr/local/sbin directory must exist on the system, and you must log in as a user who can write to the directory.

For AWS Linux AMIs, agent-based data collection is not available. For AWS monitoring, see Configure AWS Data Collection in the Administer Splunk App for Infrastructure guide.

You must have these dependencies available:

Operating system type	Required dependencies
Linux	wget apt-get (Debian and Ubuntu) yum (Redhat, CentOS, and Fedora) zypper (SUSE and openSUSE)) Internet access (easy install script)
Mac OS X	curl Homebrew Internet access (easy install script)

For more information about how the data collection works, see How the easy install script works in Splunk App for Infrastructure in the Administer Splunk App for Infrastructure guide.

Windows data collection requirements

You must have admin privileges to run the easy install script.

The Windows system must have the following dependencies available:

• powershell
• Internet access (easy install script)

For more information about how the data collection works, see How the data collection script works in Splunk App for Infrastructure in the Administer Splunk App for Infrastructure guide.

Kubernetes data collection requirements

You must have permission to run kubectl commands on the system that's running a Kubernetes cluster. You also must have access to each Kubernetes cluster you monitor in SAI.

SAI requires Splunk Connect for Kubernetes version 1.2.0 or 1.3.0 to collect Kubernetes data.

You must run the script on a Linux or Mac OS X system, and it must have the following dependencies available:

• kubectl
• Helm
• wget
• Internet access (easy install script)

OpenShift data collection requirements

You must install Helm on a local system that's running the OpenShift cluster. Do not install Helm on the cluster.

SAI requires Splunk Connect for Kubernetes version 1.2.0 or 1.3.0 to collect OpenShift data.

To configure data collection, you must have these dependencies on the system you use to configure data collection:

• OpenShift CLI tool
• Helm
• wget
• Internet access (easy install script)

Docker (no orchestration) data collection requirements

You can monitor Docker containers on a Linux or Mac OS X system that you did not deploy with an orchestration tool like Docker Swarm, Kubernetes, or OpenShift.

These are the Docker requirements:

• Docker version 1.18 and higher
• Docker API version 1.20 and higher

You must have these dependencies:

• libyajl2
• apt-get (Debian or Ubuntu)
• yum (CentOS, Redhat, or Fedora)
• zypper (SUSE or openSUSE)
• Internet access (easy install script)

VMware data collection requirements

To view the requirements for setting up VMware data collection, see Data collection planning and requirements for the Splunk Add-on for VMware Metrics in the Splunk Add-on for VMware Metrics manual.