Configure HCP Vault Dedicated metric streaming to Splunk

For details on metrics scope and interpretation, see the HCP Vault Dedicated metrics documentation.

Prerequisites

To configure metrics streaming to Splunk, you will need to have:

• Have access to a paid Splunk Cloud or Enterprise account.

  Note

  Splunk Cloud Trial account would not work with HCP Vault Dedicated as its HEC (HTTP Event Collector ) listener is hosted using a self signed certificate that HCP won't trust.

• Your Splunk HEC and token.

  Note

  HEC endpoint should be created using events and not metrics index in Splunk.

• A HCP account with the Admin role assigned

• An essentials or standard tier HCP Vault Dedicated cluster

  Note

  If you do not have a cluster running, refer to the Create a Vault Cluster on HCP or the Deploy HCP Vault Dedicated with Terraform tutorial to create an HCP Vault Dedicated cluster.

Enable metrics streaming

1. From the HCP Vault Dedicated cluster Overview page, select the Metrics view.

2. If you have not configured metrics streaming before, click Enable streaming.

3. From the Stream Vault metrics view, select Splunk as the provider and click Next.

4. Under Splunk Configuration, enter your HTTP Event Collector (HEC) Endpoint URL and event collector Token.

5. Click Save.

   Note

   At this time, HCP Vault Dedicated only supports metrics streaming to one metrics endpoint at a time.

6. HashiCorp has created a sample HCP Vault Dedicated Splunk dashboard template for metrics visualizations. Splunk dashboard templates are distributed as Splunk apps. If you prefer to use the sample dashboard template, follow the Splunk instructions for adding a Splunk app to your Splunk Enterprise or Cloud environment.

Edit the metrics streaming configuration (optional)

To edit a metrics streaming integration, perform the following steps.

1. From the Metrics page, click on the Manage drop-down, then Edit configuration.

2. Edit the configuration, then click Save.

Disable metrics streaming (optional)

To disable a metrics streaming integration, from the Metrics page, click on the Manage drop-down, then Disable streaming.