Versions Compared

Old Version 1

changes.mady.by.user user-1bc08

Saved on

compared with

New Version Current

changes.mady.by.user user-1bc08

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
HTML
<style>
.release-box {
	height: 30px; 
	width: 100px; 
	padding-top: 8px;
	text-align: center; 
	border-radius: 5px; 
	font-weight: bold; 
	background-color: #d4af37; 
	border-color: #FCE28A;
}

.release-box:hover {
  	cursor: hand;
    cursor: pointer;
    opacity: .9; 
}
</style>
<meta name="robots" content="noindex">

<div class="release-box">
<a href="https://docs.perspectium.com/display/gold" style="text-decoration: none; color: #FFFFFF; display: block;">
Gold
</a>
</div>

To enhance your DataSync integration for Splunk Enterprise, you can optionally configure the Splunk meshlet to keep track of the data you are sending by using index numbers in case of data loss. The HTTP Event Collector in the Splunk server supports indexer acknowledgement, a feature that will index each data that are sent. 


Prerequisites

(warning)(warning) First, you will need to contact Perspectium Support to get you started with Splunk meshlet.

Procedure

To get started with using indexer acknowledgment, complete the following procedures:

UI Steps


UI Step

Enable indexer acknowledgement

Access your Splunk Enterprise and go to Settings > Data Input and click into HTTP Event Collector. Check the Enable indexer acknowledgement box.


UI Step

Edit meshlet configuration file 

Configure your splunk connection by editing the meshlet configuration file. ackUrl will be your splunk URL. requestChannel will be the token value in splunk. 

Code Block
languageyml
splunk:
	ackUrl: http://splunk-url/services/collector/ack
	requestChannel: a7175f62-d67b-4793-a172-c1b946c0e444




UI Step

Run splunk meshlet 

Access your splunk meshlet application by going to the meshlet folder and run the create-service application as an Administrator. 

If running the splunk meshlet is successful, you will get a response like below: 

Code Block
languagexml
Response: {"text":"Success","code":0,"ackId":0}
Response: {"acks":{"0":true}}

Similar topics

Content by Label
showLabelsfalse
max5
showSpacefalse
sortmodified
cqllabel = "splunk" and space = currentSpace()

Contact Perspectium Support

Image Removed

US: 1 888 620 8880

UK: 44 208 068 5953

support@perspectium.com