Install the Splunk Add-on for Juniper¶
Before starting the installation, review the Hardware and software requirements for the Splunk Add-on for Juniper.
To install the add-on, perform the following steps:
-
Download the Splunk Add-on for Juniper from Splunkbase or Splunk Web.
-
For the instalation details, see the tables in Where to install this add-on and Distributed deployment feature compatibility.
-
Depending on your situation, perform any prerequisite steps specified in the tables before installing.
-
-
Follow the Installation walkthrough to perform the installation.
Distributed deployment¶
Use the following tables to install the Splunk Add-on for Juniper in a deployment that uses forwarders to get data in, such as a distributed deployment.
You might need to install the add-on in multiple places.
Where to install this add-on¶
Unless otherwise noted, you can safely install all supported add-ons to all tiers of a distributed Splunk platform deployment. See Where to install Splunk add-ons in Splunk Add-ons for more information.
This table provides a reference for installing this specific add-on to a distributed deployment of the Splunk platform:
Splunk platform instance type | Supported | Required | Comments |
---|---|---|---|
Search Heads | Yes | Yes | Install this add-on to all search heads where Juniper knowledge management is required. As a best practice, turn add-on visibility off on your search heads. This prevents data duplication errors that can result from running inputs on your search heads rather than your data collection node. |
Indexers | Yes | Conditional | Not required if you use heavy forwarders to collect data. Required if you use universal forwarders to collect data. |
Heavy Forwarders | Yes | No | This add-on supports forwarders of any type for data collection. |
Universal Forwarders | Yes | No | This add-on supports forwarders of any type for data collection. |
Distributed deployment feature compatibility¶
This table describes the compatibility of this add-on with Splunk distributed deployment features:
Distributed deployment feature | Supported | Comments |
---|---|---|
Search Head Clusters | Yes | Turn off add-on visibility on search heads. |
Indexer Clusters | Yes | |
Deployment Server | Yes | Supported for deploying the configured add-on to multiple nodes. |
Installation walkthrough¶
See About installing add-ons in Splunk Add-Ons for detailed instructions on installing a Splunk add-on in the following deployment scenarios: