Installing the Splunk ITSI content pack for IBM Z Operational Log and Data Analytics

Edit online

To install the optional Splunk IT Service Intelligence (ITSI) content pack for IBM Z® Operational Log and Data Analytics, you must create a restore job, and install the content pack.

Before you begin

Before you install the content pack, the following system requirements must be met:
  • Splunk ITSI 4.7.0 or later must be installed, depending on the version of Splunk Enterprise that is installed in your environment. For detailed information about the compatibility among versions, see Splunk Products Version Compatibility Matrix.
  • The IBM Z Operational Log and Data Analytics Splunk application must be installed.
  • The Z Common Data Provider component of IBM Z Operational Log and Data Analytics 5.1.0 must be running on your z/OS® system.
  • You must use one of the following options for sending data to Splunk:
    Data Receiver
    On the Splunk Enterprise server or Splunk heavy forwarder, the Z Common Data Provider Data Receiver must be installed, configured, and running.
    Splunk HTTP Event Collector (HEC)
    As an alternative to the Z Common Data Provider Data Receiver, you can ingest data directly into Splunk by using the Splunk HEC. For more information, see Sending data directly to Splunk by using Splunk HEC as the subscriber.

About this task

Install the optional content pack in an on-premises instance of Splunk ITSI 4.7.0 or later, depending on the version of Splunk Enterprise that is installed in your environment.

Procedure

  1. Download the content pack, which is in the backup ZIP file backup_ITSI_4.7.0_content_pack_for_ZLDA_v.r.mf.zip.
    For more information about how to get the package, see Obtaining and preparing the installation files.
  2. On your Splunk ITSI search head, create a restore job, and upload the content pack.
    For more information about restoring a backup ZIP file, see Restore from a backup ZIP file in the Splunk documentation.
  3. After the restore job completes, confirm that the objects that are included in the content pack are restored to your environment.