https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434950#M75917 <P>This is good discussion.</P> Mon, 17 Jun 2019 17:08:58 GMT daniel_wilson32 2019-06-17T17:08:58Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434946#M75913 <P>Best way to do Ping monitor for Windows and Linux servers?</P> <P>What is the best way to do ping monitor for 4k servers including Linux and Windows servers?</P> Fri, 08 Mar 2019 13:52:19 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434946#M75913 ansif 2019-03-08T13:52:19Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434947#M75914 <P>If you have forwarders installed on all your endpoints, the options are almost endless, but it depends exactly 'what' you are trying to monitor.</P> <P><STRONG>If you just want to see which machines are online</STRONG> and connected to Splunk, you can use the <CODE>metadata</CODE> command to quickly produce a list of systems which have communicated in the last x minutes.</P> <PRE><CODE>| metadata type=hosts index=_* </CODE></PRE> <P>By specifying index=_* it checks the internal logs (rather than your monitored data sources)</P> <P><STRONG>If you are looking to verify that the hosts have network connectivity to/from a specific location</STRONG> (you know they have net-access to Splunk because otherwise there wouldn't be any logs) you can write a simple script which executes <CODE>ping</CODE> from each host and indexes the results.</P> <P><STRONG>If you are looking to more accurately track, and report on network performance</STRONG>, you should use the metrics store to collect metric and performance data from each host, and build your own charts with the metrics workspace.<BR /> <A href="https://splunkbase.splunk.com/app/4192/">https://splunkbase.splunk.com/app/4192/</A></P> <P><STRONG>If you want the most powerful insight into your networking/host and performance data</STRONG>, take a look at Splunk ITSI<BR /> <A href="https://www.splunk.com/en_us/software/it-service-intelligence.html">https://www.splunk.com/en_us/software/it-service-intelligence.html</A></P> Fri, 08 Mar 2019 14:32:09 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434947#M75914 nickhills 2019-03-08T14:32:09Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434948#M75915 <P>I have splunk universal forwarder installed on all servers. Which parameter I need to use for ping monitoring for both windows and unix?</P> Mon, 11 Mar 2019 05:09:15 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434948#M75915 ansif 2019-03-11T05:09:15Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434949#M75916 <P>As said above... if you're simply trying to see if a UF is up and communicating, here is a quick query to see how long it's been since a UF has communicated with Splunk.</P> <P>| metadata type=hosts index=_internal | eval min_last_comm = now()-recentTime | eval min_last_comm = round(min_last_comm / 60) | eval _time=now() | fields _time, host, min_last_comm</P> Tue, 29 Sep 2020 23:53:30 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434949#M75916 mperry_splunk 2020-09-29T23:53:30Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434950#M75917 <P>This is good discussion.</P> Mon, 17 Jun 2019 17:08:58 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434950#M75917 daniel_wilson32 2019-06-17T17:08:58Z https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434951#M75918 <P>Most of the customer demands a report for server Availability.<BR /> We perform following things:</P> <OL> <LI>Powershell script which executes in a server,which take ip addresses from text file and index the result to Splunk.( If in case of more servers,this script is not efficient)</LI> <LI>Use deployment server to check if any of the clients are not reporting within the time (this method only ensure connection between Deployment server and end devices,sometimes the device is up but not connected/sync with DS)</LI> <LI>Use system up time. </LI> </OL> <P>Is there any other method people use? Please suggest.</P> Thu, 27 Jun 2019 08:56:49 GMT https://community.splunk.com/t5/Getting-Data-In/What-is-the-best-way-to-do-Ping-monitor-for-Windows-and-Linux/m-p/434951#M75918 ansif 2019-06-27T08:56:49Z