How this app fits into the Splunk platform picture

This topic describes the Splunk software that work together to enable Splunk App for NetApp Data ONTAP to bring you value through your data. The app uses Splunkd to index and process your data and the SplunkWeb application server to enable you to search and navigate your data using Splunk for NetAPP ONTAP components (knowledge objects, reports, dashboards, and so on).

You will download and install the Splunk App for NetApp Data ONTAP to work with Splunk. You will configure the app to collect data from your NetApp environment, index it in Splunk, and then map it to the dashboards in the Splunk App for NetApp Data ONTAP. To collect data you need a Splunk infrastructure with the Splunk App for NetApp Data ONTAP apps installed on it. This includes the main app and all add-ons (TA's and SA's).

To collect the performance data from ONTAP, the app uses a new scheduler implemented as an addon to coordinate data collection. The scheduler oversees all of the data collection tasks for the app. The scheduler UI configuration uses SplunkWeb and is the central view for job management on all data collection nodes.

Data collection nodes are responsible for making the API calls to NetApp to collect the data. The data collection node is a Splunk light forwarder or heavy forwarder with the following components installed on it - Splunk_TA_ontap, SA-Hydra, and SA-Utils. The data collection nodes run the worker processes that retrieve the data. These worker processes are implemented as Splunk modular inputs.

• Splunk_TA_ontap is the data collection component of the data collection node.
• SA-Utils contains the support files for SA-Hydra and Splunk_TA_ontap.
• SA-Hydra runs the worker processes on the data collection node.

The Splunk data collection node sends data to your Splunk indexers only after the scheduler is turned on and configured to start data collection.

App components

Component name	Description
Splunk App for NetApp Data ONTAP (splunk_app_netapp)	This component contains the user interface components and knowledge objects of the Splunk App for NetApp Data ONTAP. Install it on the indexers and search heads in your environment.
Splunk TA for NetApp (Splunk_TA_ontap, SA-Hydra, SA-Utils)	Use this app component to create a data collection node (DCN). This app component makes API calls directly to your NetApp filers to collect API data and forwards that data to your Splunk indexer/search head. This data includes performance, inventory, options, and EMS data.