Task 2: Import and configure the F5 Analytics iApp template on the BIG-IPΒΆ

  1. Open a new tab in your Chrome browser, and click on the bookmark for BIGIP_A to connect to the BIG-IP GUI

  2. Login using the following credentials:

    • Username: admin
    • Password: Agility2018

  3. Go to iApps >> Templates

  4. Click Import in the top-right

    image30

  5. Click Choose File

  6. Navigate to Desktop > Analytics Lab Files, and select the f5.analytics.v3.7.0.tmpl file. Click Open

    image31

  7. Click Upload

  8. Once the file is finished uploading, you should see it listed in the iApp Templates table.

  9. Go to iApps >> Application Services >> Applications

  10. Click Create in the top-right

    image32

  11. For the Name, enter F5-Analytics

  12. From the Template pull-down menu, choose f5.analytics.v3.7.0

    image33

  13. In the template configuration, in the Welcome to the f5 BIG-IP Analytics iApp Template section, change the response for the Do you want to see inline help? Question to No, do not show inline help.

    image34

    Note

    If you are not familiar with what all the different settings refer to, you may want to keep the inline help enabled. For now, we have disabled it just to reduce the amount of additional text on the configuration screen.

  14. Under the Information Sources section, set the following:

    1. Data Format: Splunk
    2. System Statistic: Yes
    3. Module High Speed Logging Streams: Yes
    4. Local System Logging (syslog): Yes
    5. System SNMP Alerts: No
    6. iHealth Snapshot Information: No
    7. Facility Name: F5 Lab
    8. Default Tenant: default
    9. Role Based Access Controls: No

    image35

  15. Under the Analytics System Configuration, enter the following:

    1. IP Address or Hostname: 10.1.20.252
    2. Port: 8088
    3. Protocol: HTTPS
    4. API Key: <paste the Token Value that you copied from Splunk in the previous task>

    Leave other settings at their default values

    image36

  16. Leave all settings under Module Log Stream Capture and Local Logging Capture sections at their default values

  17. Under Application Mapping, leave all settings at their default values, except in the Mapping Table, enter the following:

    1. Order: 10
    2. Type: App Name
    3. From: Virtual Name
    1. Regex: (.*)_HTTP[S]*_VS
    2. Action: Map
    3. AppendPrefix: <leave blank>
    4. DirectMapping: <leave blank>

    image37

  18. Click Finished

Note

It may take up to 10 minutes for the system to start showing data in Splunk.