The app contains detailed installation instructions. We can provide installation support tailored to your needs if needed.
This app consists of:
- Technology Addon for Universal Forwarders (TA)
- Technology Addon for Indexers (TA)
- Supporting Addon for search head(s) (SA)
If you run in a distributed environment, The UF TA's should be deployed to the Universal Forwarders, preferably via the Deployment server. The indexer TA's can be installed on the indexers by hand, a cluster master or a deployment server. The Supporting addons should go on the search heads manually or via the deployer if you run a SHC.
The UF TA's on your endpoints execute the actual test suites and forward their results via the testrunner framework in a HEC-compatible format to a Splunk HEC endpoint. The Indexer TA's have a sample configuration for such an endpoint. If you already have infrastructure for a HEC endpoint, you can configure the testrunner to use that instead.
If you want to monitor endpoints that don't (or can't) run a Universal Forwarder then you can deploy the UF TA's via other means such as Ansible or Puppet. By executing the testrunner binary via something like cron, the test suites will be executed and the results will still be sent to the HEC endpoint, even though there's no UF installed.
The testrunner framework is open and will execute any test suite that you deploy alongside the UF TA's so it's easy to expand the existing test suites and even add completely new ones. Although this app is meant for endpoint compliance, it's easy to expand the scope to things such as ITSI metrics and other business data.
Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.