Observability: Splunk Infrastructure Monitoring

ArifV — Mon, 23 Mar 2026 19:51:39 GMT

Watch On-Demand. This thread is for the Community Office Hours session on Splunk Infrastructure Monitoring on Tues, June 17, 2025 at 1pm PT / 4pm ET.

Ask the experts at Community Office Hours! An ongoing series where technical Splunk experts answer questions and provide how-to guidance on various Splunk product and use case topics.

What can I ask in this AMA?

- What are some enhancements to the Kubernetes Monitoring experience in Splunk IM?
- How do I use and customize Kubernetes navigators?
- What are best practices for optimizing Kubernetes alerts and troubleshooting workflows?
- Is there a way to view Kubernetes logs correlated with metrics?
- What are some top services that I should be monitoring?
- Anything else you'd like to learn about!

Please submit your questions at registration. You can also head to the #office-hours user Slack channel to ask questions (request access here).

Pre-submitted questions will be prioritized. After that, we will open the floor up to live Q&A with meeting participants.

Look forward to connecting!

Re: Observability: Splunk Infrastructure Monitoring

ArifV — Thu, 03 Jul 2025 15:20:52 GMT

Hello! Here are the recap materials from the session:

- On-Demand Recording

- Slide Deck

And here are the questions we received (there are supplemental slides for each of these solutions in the deck)

Q1: What are some unique advantages of Splunk IM?

Real time, OTel Native, AI-Assisted, End-to-End Correlation, all at Enterprise Scale (see additional slides in deck)

Documentation:

https://www.splunk.com/en_us/products/infrastructure-monitoring-features.html

Q2: What is related content?

A: The Related Content panel in Splunk Observability Cloud automatically correlates and presents data between different views within Splunk Observability Cloud (see add'l slides in deck)

Documentation:

https://help.splunk.com/en/splunk-observability-cloud/data-tools/related-content

Q3: How can I send metrics to Splunk IM?

A: With OpenTelemetry Collector, Cloud APIs, REST APIs (see add'l slides in deck)

Documentation:

https://help.splunk.com/en/splunk-observability-cloud/monitor-infrastructure/set-up-infrastructure-monitoring

Q4: How to manage log ingestion made by fluent, like we do with Splunk universal forwarder and props?

A: You can deploy an Otel Collector with a fluentforward receiver and export to Splunk HEC endpoint

Documentation:

Q5: Is IM only for Kubernetes? What if I want to monitor servers and apps hosted in AWS via IM?

A: With Splunk IM you can get metrics from hosts and containers on-prem or in the cloud (AWS, Azure, GCP) and services running on them like K8s, message brokers, web servers, DBs etc
You can send infrastructure metrics to Splunk IM:

With OpenTelemetry Collector (deployed in EC2 instances)
By calling Cloud APIs to get metrics from AWS (CloudWatch metrics)
By using REST API calls to send custom metrics

Documentation

https://help.splunk.com/en/splunk-observability-cloud/manage-data/available-data-sources/supported-integrations-in-splunk-observability-cloud#nav-Supported-integrations

rss.livelink.thread@place:occasion

Observability: Splunk Infrastructure Monitoring

Re: Observability: Splunk Infrastructure Monitoring