Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 10 Next »

Splunk App Upgrade Guide for SAP PowerConnect App 6.9.0

Upgrade:

  1. Before installing the new version: If you have made any changes to the lookup files (ip_subnets, security_parameters_names, sensitive_tcodes, wide_open_auth_objects, sensitive_user_roles, sensitive_user_roles_java) OR app's navigation bar :
    Make sure you take the backup of the lookup files (located at: $SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/lookups/) AND app's navigation bar XML file (located at: $SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/local/data/ui/nav/default.xml).

  2. If you are upgrading PowerConnect app from version 6.2.0 and have followed the first way of updating queries through UI given in the following KB document - {+}https://www.powerconnect.io/wiki/kb-098-cpu-memory-and-availability-gauges-displaying-0-values-v-6-2-0-bug/+, then there would be a copy of the file sap_system_ovw.xml in $SPLUNK_HOME/etc/apps/bnw-app-powerconnect/local/data/ui/views directory. Remove this file from the location and then follow the steps below.

  3. Install the app through UI from "Manage Apps" > "Install app from file".

  4. Restart Splunk

  5. From "Manage Apps" click on the "Set Up" link beside BNW-app-powerconnect entry. Follow the steps given in the following document to complete the Set up

  6. If you have taken a backup of lookup files mentioned in Step 1 of this document; its time to move them back to $SPLUNK_HOME$/etc/apps/BNW-app-powerconnect/lookups/

  7. If you have taken a backup of Navigation bar XML as mentioned in Step 1 of this document; kindly compare both the Nav bar XML (old and new) and make a decision if you want to keep old, keep new, or merge (by manually editing the old XML with the new changes)

Configuration:

  • The Lookup for the Database needs to be populated with the event data. This step is required to be performed only once as there is a separate savedsearch scheduled to run every hour for appending new items to existing lookup from new events and for some cases it's only to populate static data in the lookup for once only. There are two ways to complete this step:

  1. Open the dashboard "Wizard for New SAP SIDs and Instances Discovery" under PowerConnect menu. Select the checkboxes corresponding to the savedsearches "Database Source - Lookup Gen - Run Once Only" and “SAP System Role - Run Once Only.“ Click on the "Run Searches" button. The status of the search would get updated in the Status column of the table and the user can view the search results once the search has completed by clicking in the table cell.

  2. On Splunk's menu bar, Click on Settings -> "Searches, reports, and alerts" and manually run the saved searches "Database Source - Lookup Gen - Run Once Only" “SAP System Role - Run Once Only”. In case of a large number of events, if savedsearch execution does not get completed, try to reduce the time range and populate the lookup.

Optional Configuration (SAP Cloud product support):

  • If the user wants to use the "SAP Cloud - CPI Message Monitoring" dashboard, the user needs to enable the saved search "Cloud CPI Source - Lookup Gen". The steps to enable the savedsearches are:

    1. On Splunk's menu bar, Click on Settings -> Searches, reports, and alerts.

    2. Search for "Cloud CPI Source - Lookup Gen".

    3. Click on "Edit" dropdown under "Actions" and click on "Enable".

Optional Configuration (German or Japanese language support):

  • The app version 6.4.0 and onwards supports German and Japanese languages apart from English. By default, Splunk automatically uses the language that the user's browser is set to. To switch languages, either the browser's locale setting can be changed or for a given Splunk session it can be changed by modifying the URL that you use to access Splunk. For different languages use the URL as specified:

  1. German : http://<your_splunk_instance_address>/de-DE/app/BNW-app-powerconnect/

  2. Japanese: http://<your_splunk_instance_address>/ja-JP/app/BNW-app-powerconnect/

  3. American English: http://<your_splunk_instance_address>/en-US/app/BNW-app-powerconnect/

  4. British English: http://<your_splunk_instance_address>/en-GB/app/BNW-app-powerconnect/ *(Replace the placeholder in the URL)

Note: In case the dashboard is not getting shown in the expected language after going to the appropriate URL, the user should clear the browser cache and refresh the dashboard.
Note: Description works for Splunk version 7.3.x and above
Reference: {*}{+}https://docs.splunk.com/Documentation/Splunk/8.0.6/Admin/Userlanguageandlocale+*

Optional Configuration (Macro):

  1. On Splunk's menu bar, Click on Settings -> “Advanced search” -> “Search Macros”.

  2. Click on the “sap-index” macro and mention the index name in the Definition where data is incoming. Please see the sample below:
                (index="main" OR index="sample1" OR index="sample2")
    Note: For selecting all value of an entity, "*" (asterisk) can be used. Logical operators like "AND", "OR" should be capitalized when used in Definition.

  3. Click on the Save Button.

  • No labels