Splunk® Supporting Add-on for NetApp

Deploy and use the Splunk Supporting Add-on for NetApp

Acrobat logo Download manual as PDF


On January 20, 2023, the Splunk Supporting Add-on for NetApp will reach its end of life and Splunk will no longer maintain or develop this product.
Acrobat logo Download topic as PDF

Install the Splunk Supporting Add-on for NetApp

Installation of the Splunk Add-on for NetApp Data ONTAP is a prerequisite for the Splunk Supporting Add-on for NetApp.

Splunk Supporting Add-on for NetApp package contents

The Splunk Supporting Add-on for NetApp contains a component called SA_ITSI_Netapp.

Installation components

The following table shows where to install the components of Splunk Supporting Add-on for NetApp package and the required Splunk Add-on for NetApp Data ONTAP package in your distributed environment.

Package Component Search head Data Collection Node (DCN) Indexer Scheduler
Splunk Supporting Add-on for NetApp SA_ITSI_Netapp x
Splunk Add-on for NetApp Data ONTAP Splunk_TA_ontap x x
SA-Hydra x x
SA-VMNetAppUtils
SA-ONTAPIndex x
TA-ONTAP-FieldExtractions*

(*)These packages are not used by Splunk Supporting Add-on for NetApp package.

App components

Component Description
Splunk Supporting Add-on for NetApp The Splunk Supporting Add-on for NetApp contains the UI components of the app. Install it on the search heads in your environment.
  • SA_ITSI_Netapp
Splunk Add-on for NetApp Data ONTAP (Splunk_TA_ontap) The Splunk Add-on for NetApp Data ONTAP is used to collect data for Splunk Supporting Add-on for NetApp deployment.
  • SA-VMNetAppUtils
  • SA-Hydra
  • Splunk_TA_ontap
  • TA-ONTAP-FieldExtractions
  • TA-ONTAPIndex

Use the Splunk Add-on for NetApp Data ONTAP to perform the following tasks:

  • Make API calls to your NetApp filers to collect API data and forwards that data to your Splunk indexer/search head. This data includes performance, inventory, options, and EMS event data.
  • Create your own data collection node (DCN). Install it on a Splunk light forwarder or heavy forwarder on your data collection node. The data collection node does not collect system log data.

To configure Splunk Add-on for NetApp Data ONTAP, see Configure data collection in the Deploy and Use the Splunk App for NetApp Data ONTAP documentation.

Install the Splunk Supporting Add-on for NetApp

The Splunk Supporting Add-on for NetApp uses the Splunk Add-on for NetApp Data ONTAP to manage the scheduler functionality that the Splunk Supporting Add-on for NetApp uses to collect analyze server data. Follow these instructions to install the Splunk Supporting Add-on for NetApp on your Splunk platform environment:

  1. Download the Splunk Supporting Add-on for NetApp from Splunkbase and verify that the download package file name is splunk_supporting_add_on_for_netapp-<version>.tgz.
  2. Put the splunk_supporting_add_on_for_netapp-<version>.tgz file in $SPLUNK_HOME/etc/apps on your Splunk platform host.
  3. Extract the Splunk Supporting Add-on for the NetApp package:
    cd /opt/splunk/etc/apps
    tar xvzf splunk_supporting_add_on_for_netapp-*.tgz
    
  4. Verify that you extracted the SA_ITSI_Netapp subdirectory in the $SPLUNK_HOME/etc/apps directory from tar xvzf splunk_supporting_add_on_for_netapp-*.tgz.
  5. Restart your Splunk software:
    /opt/splunk/bin/splunk restart
    

Install the Splunk Supporting Add-on for NetApp in a search head cluster environment

  1. Download the Splunk Supporting Add-on for NetApp from Splunkbase and put the downloaded TZG file in a temporary directory to avoid overriding critical files:
    cp splunk_supporting_add_on_for_netapp-<version>.tgz /tmp
    
  2. Change to the /tmp directory and extract the Splunk Supporting Add-on for Netapp package:
    cd /tmp
    tar xvzf splunk_supporting_add_on_for_netapp-*.tgz
    
  3. Copy the extracted files and move them into your deployer apps folder inside the shcluster folder:
    cp -r * $SPLUNK_HOME/etc/shcluster/apps/
    
  4. Verify that the extracted SA_ITSI_Netapp package was copied correctly and resides in the $SPLUNK_HOME/etc/shcluster/apps folder.
  5. On your deployer, deploy the Splunk Supporting Add-on for NetApp app onto any member of your search head cluster:
    ./splunk apply shcluster-bundle -target <URI>:<management_port> -auth <username>:<password>
    
  6. Restart your Splunk software in each of the locations where you installed the app.

Access NetApp dashboards through ITSI

The Splunk Supporting Add-on for NetApp and the Splunk App for NetApp Data ONTAP contain identical knowledge objects that cause a conflict when installed on the same search head. To avoid conflict, do not install both apps on the same search head.

To make dashboards accessible through the ITSI app, install the Splunk Supporting Add-on for NetApp on the same search head the ITSI app is installed on. The Splunk App for NetApp Data ONTAP cannot be on the same search head.

  1. Log into Splunk Web on the Splunk Enterprise instance on which you have installed the apps.
  2. Navigate to IT Service Intelligence from the Apps panel.
  3. Click Dashboards > Dashboards and locate the NetApp dashboards with the name SA_ITSI_Netapp.

Enable Data model acceleration and use data models

An admin can enable data model acceleration or change the acceleration period. Perform the following steps on the search head to enable acceleration of the NetApp_ONTAP data model:

  1. In Splunk Web, go to Settings > Data models.
  2. From the App list, select Splunk Supporting Add-on for NetApp (SA_ITSI_Netapp) to see the data models defined and used by the Splunk Supporting Add-on for NetApp.
  3. Click Edit > Edit Acceleration on the data model you want to enable acceleration for.
  4. Select Accelerate and select the summary range to specify the acceleration period. The default summary range is 7 days.
  5. Click Save.
Last modified on 27 September, 2021
PREVIOUS
About the Splunk Supporting Add-on for NetApp
  NEXT
Get started with the Splunk Supporting Add-on for NetApp

This documentation applies to the following versions of Splunk® Supporting Add-on for NetApp: 1.0.1


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters