Datasets - ironstream_for_splunk - ironstream_for_elastic - ironstream_for_kafka - 1.0

Ironstream for Splunk®/Kafka®/Elastic® Ironstream Data Model for IBM i Readme

Product type
Software
Portfolio
Integrate
Product family
Ironstream™ software
Product
Ironstream™ software > Ironstream™ software for Splunk®
Ironstream™ software > Ironstream™ software for Elastic®
Ironstream™ software > Ironstream™ software for Kafka®
Version
1.0
ft:locale
en-US
Product name
Ironstream Splunk®/Kafka®/Elastic®
ft:title
Ironstream for Splunk®/Kafka®/Elastic® Ironstream Data Model for IBM i Readme
Copyright
2020
First publish date
2014
ft:lastEdition
2023-08-25
ft:lastPublication
2023-08-28T08:30:26.212000

To verify that data is entering a model dataset, follow these steps in Splunk Web:

  1. Log on as an Administrator.

  2. Go to Settings > Data models.

  3. Select to Edit Datasets for the Ironstream for IBM i data model.

  4. Select a dataset. For example: LPAR Summary.

  5. In the BASE SEARCH section of the dataset, select Edit.

  6. Click the Search button (with the magnifying glass icon).

When the search completes you should see sample entries for the selected field from matching (Collection Services) Splunk events in the bottom half of the page.

If you see sample data, the dataset is being populated.