Create a Splunk Index for SAP data
PowerConnect requires creating a custom index for data delivered by connected SAP systems. In order to create an index…
Connect to Splunk management interface using an administrator account.
Once logged-in, on the top, right hand side, click on “Settings” and then in “Indexes”. A list of all indexes currently defined appears.
![](../__attachments/2948268171/2020-12-14%2020_04_10-mRemoteNG%20-%20confCons.xml%20-%20Marcel-Test.png?inst-v=cc5d1456-4022-4264-b658-e73cfc9f0416)
Create a new index with the name “sap” or similar. It is just crucial to take the name as a reference for future use and to be able to relate the index to its usage eventually.
![](../__attachments/2948268171/2020-12-14%2020_04_37-mRemoteNG%20-%20confCons.xml%20-%20Marcel-Test.png?inst-v=cc5d1456-4022-4264-b658-e73cfc9f0416)
Use default values but change the “App” value to “SAP PowerConnect for Splunk”.
“Save” the new index.
![](../__attachments/2948268171/2020-12-14%2020_05_43-mRemoteNG%20-%20confCons.xml%20-%20Marcel-Test.png?inst-v=cc5d1456-4022-4264-b658-e73cfc9f0416)
The new index now appears in the list.
![](../__attachments/2948268171/2020-12-14%2020_07_13-mRemoteNG%20-%20confCons.xml%20-%20Marcel-Test.png?inst-v=cc5d1456-4022-4264-b658-e73cfc9f0416)
Next step is to create an HTTP Event Collector (HEC) which actually is a prerequisite for establishing a connection between SAP and Splunk.