Set up Data Manager
Data Manager ships as a built-in application in Splunk Cloud Platform and is available on Amazon Web Services (AWS) commercial stacks, for Splunk Cloud Platform customers on the Classic or Victoria Experience.
For more information on Splunk Cloud Platform experiences, see the Experience designations section of the Splunk Cloud Platform Service Description manual.
Splunk platform roles and capabilities
Role requirements
If the user of the Data Manager app has either the admin or sc_admin role, then all role and capability requirements are met by default.
If a user does not have the admin or sc_admin role, they must verify that their assigned roles collectively contain all of the capabilities listed in the Capability requirements section of this topic.
SplunkDMReadOnlyAWSCloudFormationStackSetAdministrationRoleAWSCloudFormationStackSetExecutionRole
Capability requirements
In order to operate Data Manager, each user must have a role that has the following capabilities on Splunk Cloud Platform:
'accelerate_search'
'admin_all_objects'
'dmc_deploy_apps'
'dmc_deploy_token_http'
'edit_httpauths'
'edit_sourcetypes'
'edit_token_http'
'edit_view_html'
'get_metadata'
'get_typeahead'
'indexes_edit'
'indexes_list_all'
'list_accelerate_search'
'list_httpauths'
'list_inputs'
'list_settings'
'list_storage_passwords'
'list_tokens_own'
'list_tokens_scs'
'output_file'
'rest_apps_management'
'rest_properties_get'
'rest_properties_set'
'run_collect'
'run_mcollect'
'schedule_rtsearch'
'schedule_search'
'search'
Splunk platform requirements
Search head requirements
Data Manager is available only on the primary search head of your Splunk Cloud deployment. Contact your Splunk Cloud administrator to find out which node or cluster has primary set to true.
Enable indexes
After creating the role with the listed capabilities, perform the following steps to enable the indexes needed for Data Manager to work.
- Navigate to Edit Role.
- Navigate to Indexes, and select the Included box for All non-internal indexes.
- Save your changes.
Regional availability by cloud providers
Data Manager is supported on different regions depending on your cloud provider.
| Cloud provider | Regions |
|---|---|
| Amazon Web Services | Data Manager is available on Splunk Cloud in the following AWS regions:
For more information on Splunk Cloud experiences, see the Available regions and region differences section of the Splunk Cloud Platform manual. |
| Microsoft Azure | Data Manager is supported in all Azure regions, except for Azure Government regions. |
| Google Cloud Platform | Data Manager is currently supported on all Google Cloud Platform regions. |
Supported regions for data ingestion
The supported regions for data ingestion from AWS, Azure, and Google Cloud Platform.
The supported regions for data ingestion from AWS, Azure, and Google Cloud Platform.
| Cloud provider | Regions |
|---|---|
| Amazon Web Services |
|
| Microsoft Azure |
You can select your Azure region from the available options in Data Manager. The list of available regions applies to a given configuration only.
|
| Google Cloud Platform |
The regions where the Google Cloud Dataflow job will be created. To learn more about regions, search for "Regions and zones" in the Google Cloud documentation.
|
Cost considerations
Deploying templates in the accounts of your cloud service provider will incur a cost. The total amount of this cost depends on your cloud service provider, and the amount of data that you wish to ingest.
For more information, see the pricing documentation for your cloud service provider.