Cloud Migration Assessment App for Splunk (SCMA)

Overview

Details

Welcome to the Splunk Cloud Migration Assessment App
This app is designed for existing Splunk customers interested in migrating to Splunk Cloud, our Software as a Service (SaaS) solution. The app will assess your current Splunk Enterprise deployment that is running on-premises or in a bring your own license (BYOL) model and provide guidance for your migration to Splunk Cloud.

The high-level assessment captured by this app will also provide data points to help our Sales Engineering and PS Teams scope your migration efforts, implement best practices, and prioritize your migration success. For more detailed information on the compatibility of your apps, use the Analysis Of SplunkBase Apps for Splunk.

Note:
This App is self-documenting and will guide you through the experience. Be sure to follow the in-App guidance. The calculations in this app are meant to be directional and for educational purposes only. Results are not guaranteed.

Installation:
This app can only evaluate the data that available in the search results. Therefore, this App should be installed on the Splunk Monitoring Console (MC). The MC should have access to all Splunk servers in your environment. This App is compatible with all versions of Splunk 6.5.x and above.

Quick & Dirty:
Sometimes it is hard to get an App installed, or you might want to do some covert investigations. To initiate these discussions with your Splunk Account team, run the following search from your Monitoring Console (MC) and save the results. It is not nearly a complete assessment, but if we can only get the results from one search, this is it:

index=_audit search_id!="'rsa_*" search_id!="'RemoteStorageRetrieveBuckets_*" search_id!="'searchparsetmp_*" search_id!="'remote_*" search_id=* total_run_time earliest=-7d@d latest=@d
| eval host_sid = 'host'.":".'search_id'
| bin _time span=1d
| stats dc(host_sid) AS search_count by _time
| stats avg(search_count) AS search_count_daily_avg
| eval search_count_daily_avg=round(search_count_daily_avg,0)

You can also run any one of the checks individually, which are listed under Tools -> Health Check Items.

Please contact Splunk Support with any questions regarding this App.

**** If you are upgrading the App, be sure to remove the old App folder before installing the new version.

Introduction of Rapid Application Deployer (RAD) Beta
- Bulk migration of validated private applications
- Bulk migration of supported SplunkBase applications (With selectable version)
- Migration of local configurations and dashboards
- Migration of local configuration for core apps (e.g., search)
- ACL migration
Introduction of ACS Helper Beta : A simple UI in front of ACS services :
- List, Delete Applications for a Splunk Cloud Stack
- Configure IP allow list
- Configure outbound ports
- Manage Indexes
- Manage HTTP Event Collector (HEC) tokens
- View maintenance windows
- Manage restarts

Release Notes

Version 5.4.4

April 22, 2024

Several performance improvements and bug fixes.

Version 5.4.3

Feb. 7, 2024

Several performance improvements and bug fixes.

15,875

Downloads

Share Subscribe

Version

Built by

Splunk Inc.

Contributors

srv-sscp-gitlab-scma
srv-sscp-gitlab-scma
AK Khamis
Atef Kouki
Tomas Chase
Stephen Halpin
Dave Carmack
Vladimir Skoryk
Hutch Hutchinson
Jim Donn

Support

Splunk Supported Questions on Splunk Answers File a case Flag as inappropriate

Compatibility

Products: Splunk Enterprise

Splunk Versions: 9.2, 9.1, 9.0, 8.2, 8.1, 8.0, 7.3, 7.2, 7.1, 7.0

Platform: Platform Independent

CIM Versions: 5.x, 4.x, 3.x

Splunk Versions: 9.2, 9.1, 9.0, 8.2, 8.1, 8.0, 7.3, 7.2, 7.1, 7.0

Platform: Platform Independent

CIM Versions: 5.x, 4.x, 3.x

Licensing

Splunk General Terms

Category & Contents

Categories: Utilities

App Type: App

Subscribe Share

My Account

Support & Services