how to customize splunk Add-on for F5 BIG-IP

Hello Folks,

 

I have to customize the splunk Add-on for F5 BIG-IP with my splunk aviable data.

 

I have depyoled F5 LTM data into splunk Environment with the help of syslogs servers. To fetch this syslogs data's We have 5 heavy forwarder instances configured and forwards it to the 5 individual indexer instances.

 

Now, The Splunk F5 Add-on had been uploaded into the search head cluster master and now we need a customize Technology add on, based on the available splunk data from F5.

 

As of now, I was not able to see the F5 data being ingested into splunk from 17 hosts Below is the inputs.conf detail.

 

inputs.conf detail: F5 LTM [monitor:///opt/syslogs/web_access/.../*.log] index = web_app sourcetype = f5:network:loadbalancer host_segment = 4

 

IN the splunk Add-on for F5 BIG-IP, I could see the below details:

 

Kindly guide me on how to customize the Add-on app based on F5 LTM data available in splunk

 

Thanks