Splunk IT Service Intelligence

Does Splunk Insights for Infrastructure supports Supports Server 2008?

jibin1988
Path Finder

Does SII supports Server 2018? I want to monitor server 2008 r2. Will it support? when i am trying to run the scrip i and getting below error :

Exception setting "SecurityProtocol": "Cannot convert null to type "System.Net.SecurityProtocolType" due to invalid enu
meration values. Specify one of the following enumeration values and try again. The possible enumeration values are "Ss
l3, Tls"."
At line:1 char:575
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]:: <<<< SecurityProto
col = [Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $
web.DownloadFile("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...
")}; [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 }
+ CategoryInfo : InvalidOperation: (:) [], RuntimeException
+ FullyQualifiedErrorId : PropertyAssignmentException

Exception calling "DownloadFile" with "2" argument(s): "The underlying connection was closed: An unexpected error occur
red on a send."
At line:1 char:723
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]::SecurityProtocol =
[Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $web.Do
wnloadFile <<<< ("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...
")}; [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 }
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException

Exception calling "DownloadFile" with "2" argument(s): "The underlying connection was closed: An unexpected error occur
red on a send."
At line:1 char:723
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]::SecurityProtocol =
[Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $web.Do
wnloadFile <<<< ("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...
")}; [System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 }
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : DotNetMethodException

The term '.\install_uf.ps1' is not recognized as the name of a cmdlet, function, script file, or operable program. Chec
k the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:936
+ $env:SPLUNK_URL="192.168.20.207" ; $env:RECEIVER_PORT="9997" ; $env:DIMENSIONS="" ; $env:SPLUNK_HOME="$env:programfil
es\SplunkUniversalForwarder"; $env:METRICS="cpu,physical_disk,network,memory,system,process,logical_disk"; $env:PER_CPU
="true"; $env:LOG_SOURCES="`$SPLUNK_HOME\var\log\splunk*.log*%uf,Application%WinEventLog,Security%WinEventLog,System%W
inEventLog,Forwarded Events%WinEventLog,Setup%WinEventLog"; $web=New-Object Net.WebClient; $path=Convert-Path .; [Syste
m.Net.ServicePointManager]::ServerCertificateValidationCallback={$true}; [Net.ServicePointManager]::SecurityProtocol =
[Net.SecurityProtocolType]::Tls12 ; $files="install_uf.ps1","install_uf_script.ps1"; Foreach($file in $files) { $web.Do
wnloadFile("https://192.168.20.207:8000/static/app/splunk_app_infrastructure/windows_scripts/$file",$path+"\$fil...}; [
System.Net.ServicePointManager]::ServerCertificateValidationCallback = $null; if ($?) { .\install_uf.ps1 <<<< }
+ CategoryInfo : ObjectNotFound: (.\install_uf.ps1:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

dagarwal_splunk
Splunk Employee
Splunk Employee

Splunk Insights for Infrastructure uses Splunk Universal Forwarder for Windows data collection. So, as long as Splunk UF is supported and you can run the powershell script to configure it, everything will work.
Here is the supported OS doc for UF:
http://docs.splunk.com/Documentation/Splunk/7.2.0/Installation/Systemrequirements#Windows_operating_...

0 Karma

jibin1988
Path Finder

I got it. Splunk Insights for Infrastructure is supporting windows 2008 server r2. We need to update the powershell 2 to powershell 4. Its working fine.

After updating the powershell try to run the agent installation script. It will work.

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...