Analytics IApp with Splunk

Hi @Robin -

Login to the vCMP guest and run a tcpdump:

tcpdump -nni 0.0 host 

You should see constant traffic on dst port 8088 (HTTPS port in iApp). Do you have basic connectivity to your splunk server with ping?

Are you using Splunk Enterprise? Have you tried a restart of the Splunk Server. Do you have enough data being sent to Splunk? Do you have the general "Define" matching in the iApp or are you matching on something specific? Wait 10 minutes after generating traffic to see it in Splunk.

And it MAY need to be run from the /Common partition. Unless there is a Release Candidate that fixes this to run in separate partitions.

Thanks!