ZenPacks

Splunk Event Forwarder ZenPack

This ZenPack reads events from the eventForwarder queue and dumps them into a flat file that's easy for splunk to consume locally using the EventForwarder ZenPack.

Support

This ZenPack is developed by the Zenoss user community and supported via our online forums. Zenoss, Inc. does not provide direct support for this ZenPack.

Background

See github README.

Installation

Normal Installation (packaged egg)

  1. Download the appropriate egg file for the version of Zenoss you are running.
  2. Ensure you are logged in as the zenoss user:
    $ sudo su - zenoss
  3. Install the ZenPack:
    $ zenpack --install ZenPacks.SteelHouseLabs.SplunkForwarder-*.egg
  4. Restart these services:
    $ zenoss restart

Developer Mode Installation

In order to do a development mode installation you will want to clone the existing git repository, and then use the --link flag with the zenpack command:

  1. Ensure you are logged in as the zenoss user:
    $ sudo su - zenoss
  2. Start by cloning the upstream repository:
    $ git clone git://github.com/Hackman238/ZenPacks.SteelHouseLabs.SplunkForwarder.git
  3. Next, perform the installation:
    $ zenpack --link --install ZenPacks.SteelHouseLabs.SplunkForwarder
  4. Finally, restart these serivices:
    $ zenoss restart

Community

This ZenPack is developed and supported by the Zenoss User Community. Contact Zenoss to request more information regarding this or any other ZenPacks. Click here to view all available Zenoss Community ZenPacks.

randomness