Create a Splunk Index for SAP data

PowerConnect requires creating a custom index for data delivered by connected SAP systems. In order to create an index…

• Connect to Splunk management interface using an administrator account.

• Once logged-in, on the top, right hand side, click on “Settings” and then in “Indexes”. A list of all indexes currently defined appears.

Open

• Create a new index with the name “sap” or similar. It is just crucial to take the name as a reference for future use and to be able to relate the index to its usage eventually.

Open

• Use default values but change the “App” value to “SAP PowerConnect for Splunk”.

• “Save” the new index.

• The new index now appears in the list.

Next step is to create an HTTP Event Collector (HEC) which actually is a prerequisite for establishing a connection between SAP and Splunk.