Skip to main content

 

Splunk Lantern

Getting Started with Splunk Data Stream Processor

 

Set up the Splunk Data Stream Processor

Step 1

Verify that your system meets the minimum requirements to install the Splunk Data Stream Processor and that you have configured the ports required for the Splunk Data Stream Processor.

  1. Hardware and Software Requirements
  2. Gravity Ports

Step 2

Follow these instructions to install the Splunk Data Stream Processor

Step 3 

(Optional) Use these instructions to secure the Splunk Data Stream Processor deployment with SSL/TLS Certificates.

Create Splunk Data Stream Processor pipelines

After you’ve installed and set up the Splunk Data Stream Processor, you can now start creating Splunk Data Stream Processor pipelines to collect streaming data, perform transformations on that data, and route that data to the destination where it has the most value.

Step 1

Connect the Splunk Data Stream Processor to data sources and destinations.

For instructions on how to connect the Splunk Data Stream Processor to other data sources and destinations, refer to the chapter in the Splunk Data Stream Processor documentation corresponding to the type of data source or destination that you are using. See getting started with DSP data connections.

Step 2

Create a pipeline. A pipeline is a series of functions that define the flow of data from a data source to a data destination. All the data that the Splunk Data Stream Processor handles flows through a pipeline. 

  1. If you are new to the Splunk Data Stream Processor, we recommend that you start with the Splunk DSP tutorial. This tutorial guides you through the steps of creating a pipeline for the first time, sending data to that pipeline, and routing that data to a Splunk index. 

  2. To learn more about building pipelines, refer to the Splunk Data Stream Processor User Manual. See processing data in motion using Splunk DSP for information on how to build pipelines from scratch as well as examples of how to perform common use-cases with the Splunk Data Stream Processor.

Step 3

Preview, save, and activate your pipeline.

  1. After you’ve created a pipeline and connected that pipeline to a data source and data destination, you can start a preview session to verify that your data is making it through your pipeline as expected. See test your pipeline configuration with preview sessions
  2. After you’ve verified that your data looks the way you want it to look, click Save and then Activate.

Additional resources