If necessary, tweak your input and event processing configurations further until events look the way you want them to.Did the default configurations work well for your events?.Do you see the sort of data you were expecting?.Review the test data that you added with the Search & Reporting app.Preview and modify how your data will be indexed before committing the data to the test index.Any data you add to your test index counts against your maximum daily indexing volume for licensing purposes. Create a test index and add a few inputs.To add data, follow these high-level steps: What do I want to do with the indexed data? Should I use forwarders to access remote data? Where does the data reside? Is it local or remote? You can go to either the Search & Reporting app or the main app page and begin exploring the data that you collected.īefore you start adding inputs to your deployment, ask yourself the following questions: See Use apps and add-ons to get data in.Īfter you configure the inputs or enable an app, your Splunk deployment stores and processes the specified data. ![]() With a Splunk Cloud Platform deployment, you might need to configure a heavy forwarder or universal forwarder to send the data to your Splunk Cloud Platform instance.Īlternatively, you can download and enable an app, such as the Splunk App for Microsoft Exchange or Splunk IT Service Intelligence. For the most straightforward option, use Splunk Web. For information on configuring inputs, read "Configure your inputs" in the Getting Data In Manual.To get started with getting data into your Splunk deployment, point your deployment at some data by configuring an input. If you decide not to use forwarders to handle your data inputs, you can set up inputs on each peer in the usual way for example, by editing nf on the peers. See "Advantages of the indexer discovery method." By enabling indexer discovery on your forwarders, the forwarders automatically load balance across all available peer nodes, including any that are later added to the cluster.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |