All Apps and Add-ons

universal forwarder on xenserver

leandesk
New Member

how to install universal forwarder on xenserver

0 Karma

jconger
Splunk Employee
Splunk Employee

The Python SDK is not required. The XenServer app uses Python to query the XenServer Pool Master via XenAPI (which is a web service). You will need to modify $SPLUNK_HOME/etc/apps/TA-XS60-Server/local/xsconfig.conf for your XenServer pool details.

leandesk
New Member

if i install app for xenserver should i install phyton sdk also. and what is the procedure to pull data from xenserver to the splunk app for xen

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

You would not install the forwarder on XenServer hypervisor, since it doesn't run a supported OS. You would install the forwarder on any guest OS as a normal forwarder. If you need to get information from the hypervisor, you should do that from outside the hypervisor, using syslog ( http://splunk-base.splunk.com/answers/54506/xenserver-56 )or the APIs (e.g., there is a Python SDK for querying data from XenServer, or just use http://splunk-base.splunk.com/apps/48467/splunk-for-citrix-xenserver-technology-add-on )

0 Karma

jconger
Splunk Employee
Splunk Employee

Hello,

You should not install the Universal Forwarder on XenServer. The Universal Forwarder should be installed on a remote machine. This remote machine can be physical or virtual. The only requirement is that the remote machine have Python 2.4 installed. You can install on *nix or Windows.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...