Can I install the splunk software on windows and monitor the WAS running on unix ? Where do I configure that ?
Here is the simple list of steps.
Steps on unix: 1. Install Splunk on Unix 2. Install WAS app on Splunk 3. Setup WAS app on Splunk 4. Turn on forwarder on Splunk
Steps on Windows: 1. Install Splunk on Unix 2. Install WAS app on Splunk (no setup needed) 3. Enable the receiver on Splunk 4. create a local directory under SplunkWAS 5. copy app.conf from SplunkWAS/local in unix's machine to Windows machine, to bypass the setup
The Splunk for WAS app needs to be able to run wsadmin
scripts against the WebSphere instance. At a minimum, you need to install a Splunk forwarder on the unix machine. It can happily forward to a Windows indexer if that is what you desire.
The app is a bit more complicated than that, but basically, yes, you need a forwarder, and then you'll need the app installed on the unix machine, and the app installed on the Windows indexer as well.