Installing

To accept the End User License Agreement (EULA)

  1. Open the EULA that is included in the component files (EULA.pdf or EULA.txt).
  2. Read the EULA and accept the terms.
    This acceptance is legally binding. If acting on behalf of an entity, ensure that you have the authority to accept the terms of the EULA for that entity.

To install the Splunk add-on

  1. Download the data handler package that you need:
    • BMC AMI Defender SPLN Data Handler Add-on package (BMC_AMI_Defender_SPLN_Data_Handler-versionNumber.spl) file
    • BMC AMI Defender CEF Data Handler Add-on package (BMC_AMI_Defender_CEF_Data_Handler-versionNumber.spl) file
  2. Log in to your Splunk instance as a user with admin rights.
  3. From the Splunk web home page, click the gear icon next to Apps.
    image2019-4-3_11-40-28.png

  4. Click Install app from file.
    image2019-4-3_11-40-57.png

  5. Click Browse and locate the data handler.
    image2019-4-3_11-41-29.png

  6. Click Upload.
    When the upload is complete, you return to the Apps list.

Where to go from here

After installation is complete, set up the data input to receive messages. For more information, see Customizing-after-installation.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*