The Nutanix Prism TA for Splunk Enterprise allows customers using Splunk to collect, ingest, and index data about their virtual environments and their hosts managed by Nutanix Prism.
Version 1.0 of the TA for Nutanix Prism is compatible with:
Version 1.0 of the TA for Nutanix Prism incorporates the following third-party software or libraries:
TA for Nutanix Prism supports the following server platforms in the versions supported by Splunk Enterprise:
To function properly, TA for Nutanix Prism requires the following software:
Because this add-on runs on Splunk Enterprise, all of the Splunk Enterprise system requirements apply.
Download the TA for Nutanix Prism at ENTER DOWNLOAD LOCATION.
To install and configure this app on your supported platform, follow these steps:
Deploy to single server instance
Install the TA for Nutanix Prism on the single server using one of the methods described above.
Deploy to distributed deployment
In a distributed deployment, the TA for Nutanix Prism should be installed on the following:
Heavy Forwarder: The inputs contained within the TA should be configured on the Heavy Forwarder.
Indexer: The inputs does not need to be configured on the indexer unless there is only one indexer in the deployment and no Heavy Forwarder. The TA contains index time conifgurations and should be installed on the Indexer.
* Search Head: The inputs does not need to be configured on the Search Head. The TA does contain search time configurations and should be installed on the Search Heads.
Configure Nutanix Prism API Inputs
There are two ways to configure the inputs for this app:
Using the Web Interface:
On you Splunk Enterprise instance, navigate over to Settings —> Data Inputs —> and select the Nutanix Prism API endpoints you want to ingest into Splunk. For each input you want to add, select the endpoint then select new —> and fill out the required form.
The input form requires the following information from users:
After successfully completing the input form, ensure to enable the input by navigating over to Settings —> Data Inputs —> Select the Input —> Under Status —> Select Enable. By default, the host, source, index and sourcetype fields are configured.
Using the configuration files:
Configure Nutanix Syslog Data
Added the usage stats of the cluster for cluster storage summary.
Better log handling to $SPLUNK_HOME/var/log/TA-nutanix
New additional features of security including password encryption, better log handling.
Added additional syslog handling configurations.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.