topic Capacity health check dashboard and query in Splunk Cloud Platform

Capacity health check dashboard and query

ShamGowda — Tue, 02 Apr 2024 06:31:02 GMT

Hi All,

I wanted to capture both Windows and Unix servers CPU, Memory and Disk usage. below are sample event.

Re: Capacity health check dashboard and query

tej57 — Mon, 22 Apr 2024 08:31:54 GMT

What is the concern here? Have you got the data already in the respective index? Also, have you explored Splunkbase already? There are quite lots of apps that helps visualizing the memory and CPU usage.

Thanks,
Tejas.

Re: Capacity health check dashboard and query

ShamGowda — Fri, 03 May 2024 03:30:23 GMT

I am receiving the logs and required query to monitor top 10 highest use CPU, Memory, processor and Disk

Re: Capacity health check dashboard and query

deepakc — Fri, 03 May 2024 06:13:23 GMT

These are some basic examples once you have ingested the data, the same principles apply to Windows metrics

Analyse the data, work out the fields that contain the data and work on SPL, until it gives you the results

This example shows how you can monitor linux metrics - change the threshold (| where cpu_load_percent >=1)

This example shows how you can memory percent % linux metrics - change the threshold (| where PercentMemory >=0)

Do similar for Disk/processor etc