Install the Splunk Supporting Add-on for NetApp

Installation of the Splunk Add-on for NetApp Data ONTAP is a prerequisite for the Splunk Supporting Add-on for NetApp.

Splunk Supporting Add-on for NetApp package contents

The Splunk Supporting Add-on for NetApp contains a component called SA_ITSI_Netapp.

Installation components

The following table shows where to install the components of Splunk Supporting Add-on for NetApp package and the required Splunk Add-on for NetApp Data ONTAP package in your distributed environment.

Package	Component	Search head	Data Collection Node (DCN)	Indexer	Scheduler
Splunk Supporting Add-on for NetApp	SA_ITSI_Netapp	x
Splunk Add-on for NetApp Data ONTAP	Splunk_TA_ontap		x		x
	SA-Hydra		x		x
	SA-VMNetAppUtils
	SA-ONTAPIndex			x
	TA-ONTAP-FieldExtractions*

(*)These packages are not used by Splunk Supporting Add-on for NetApp package.

App components

Component	Description
Splunk Supporting Add-on for NetApp	The Splunk Supporting Add-on for NetApp contains the UI components of the app. Install it on the search heads in your environment. SA_ITSI_Netapp
Splunk Add-on for NetApp Data ONTAP (Splunk_TA_ontap)	The Splunk Add-on for NetApp Data ONTAP is used to collect data for Splunk Supporting Add-on for NetApp deployment. SA-VMNetAppUtils SA-Hydra Splunk_TA_ontap TA-ONTAP-FieldExtractions TA-ONTAPIndex

Use the Splunk Add-on for NetApp Data ONTAP to perform the following tasks:

• Make API calls to your NetApp filers to collect API data and forwards that data to your Splunk indexer/search head. This data includes performance, inventory, options, and EMS event data.
• Create your own data collection node (DCN). Install it on a Splunk light forwarder or heavy forwarder on your data collection node. The data collection node does not collect system log data.

To configure Splunk Add-on for NetApp Data ONTAP, see Configure data collection in the Deploy and Use the Splunk App for NetApp Data ONTAP documentation.

Install the Splunk Supporting Add-on for NetApp

The Splunk Supporting Add-on for NetApp uses the Splunk Add-on for NetApp Data ONTAP to manage the scheduler functionality that the Splunk Supporting Add-on for NetApp uses to collect analyze server data. Follow these instructions to install the Splunk Supporting Add-on for NetApp on your Splunk platform environment:

1. Download the Splunk Supporting Add-on for NetApp from Splunkbase and verify that the download package file name is splunk_supporting_add_on_for_netapp-<version>.tgz.
2. Put the splunk_supporting_add_on_for_netapp-<version>.tgz file in $SPLUNK_HOME/etc/apps on your Splunk platform host.
3. Extract the Splunk Supporting Add-on for the NetApp package:

   cd /opt/splunk/etc/apps
   tar xvzf splunk_supporting_add_on_for_netapp-*.tgz
   

4. Verify that you extracted the SA_ITSI_Netapp subdirectory in the $SPLUNK_HOME/etc/apps directory from tar xvzf splunk_supporting_add_on_for_netapp-*.tgz.
5. Restart your Splunk software:

   /opt/splunk/bin/splunk restart
   

Install the Splunk Supporting Add-on for NetApp in a search head cluster environment

1. Download the Splunk Supporting Add-on for NetApp from Splunkbase and put the downloaded TZG file in a temporary directory to avoid overriding critical files:

   cp splunk_supporting_add_on_for_netapp-<version>.tgz /tmp
   

2. Change to the /tmp directory and extract the Splunk Supporting Add-on for Netapp package:

   cd /tmp
   tar xvzf splunk_supporting_add_on_for_netapp-*.tgz
   

3. Copy the extracted files and move them into your deployer apps folder inside the shcluster folder:

   cp -r * $SPLUNK_HOME/etc/shcluster/apps/
   

4. Verify that the extracted SA_ITSI_Netapp package was copied correctly and resides in the $SPLUNK_HOME/etc/shcluster/apps folder.
5. On your deployer, deploy the Splunk Supporting Add-on for NetApp app onto any member of your search head cluster:

   ./splunk apply shcluster-bundle -target <URI>:<management_port> -auth <username>:<password>
   

6. Restart your Splunk software in each of the locations where you installed the app.

Access NetApp dashboards through ITSI

The Splunk Supporting Add-on for NetApp and the Splunk App for NetApp Data ONTAP contain identical knowledge objects that cause a conflict when installed on the same search head. To avoid conflict, do not install both apps on the same search head.

To make dashboards accessible through the ITSI app, install the Splunk Supporting Add-on for NetApp on the same search head the ITSI app is installed on. The Splunk App for NetApp Data ONTAP cannot be on the same search head.

1. Log into Splunk Web on the Splunk Enterprise instance on which you have installed the apps.
2. Navigate to IT Service Intelligence from the Apps panel.
3. Click Dashboards > Dashboards and locate the NetApp dashboards with the name SA_ITSI_Netapp.

Enable Data model acceleration and use data models

An admin can enable data model acceleration or change the acceleration period. Perform the following steps on the search head to enable acceleration of the NetApp_ONTAP data model:

1. In Splunk Web, go to Settings > Data models.
2. From the App list, select Splunk Supporting Add-on for NetApp (SA_ITSI_Netapp) to see the data models defined and used by the Splunk Supporting Add-on for NetApp.
3. Click Edit > Edit Acceleration on the data model you want to enable acceleration for.
4. Select Accelerate and select the summary range to specify the acceleration period. The default summary range is 7 days.
5. Click Save.