topic What Data Collection Methods Splunk support ? in Monitoring Splunk

What Data Collection Methods Splunk support ?

yantian — Tue, 05 Nov 2019 10:18:48 GMT

before I start to use Splunk to my Data Analytics, I need to assess what systems/devices can be analyzed on what granularity based on what Data Collection Methods (HTTP API, syslog, proactively polling or passively receiving etc) Splunk support, this basically implies what Splunk is capable of..

It was a shame that such important information was not mentioned anywhere based on my search..

anyone has comprehensive answer for this question ?

Re: What Data Collection Methods Splunk support ?

gcusello — Tue, 05 Nov 2019 14:05:14 GMT

Hi yantian,
you should read https://docs.splunk.com/Documentation/Splunk/8.0.0/Data/WhatSplunkcanmonitor

Splunk Enterprise can index any kind of data. In particular, any and all IT streaming, machine, and historical data, such as Windows event logs, web server logs, live application logs, network feeds, metrics, change monitoring, message queues, archive files, and so on.

Anyway:

files and directories using Universal Forwarder (Splunk agent),
scripts using Universal Forwarder (Splunk agent),
syslogs by network (UDP or TCP),
http/https calls,
Windows Event logs,
WMI,
SNMP events,
APIs.

Ciao.
Giuseppe

Re: What Data Collection Methods Splunk support ?

adonio — Tue, 05 Nov 2019 14:35:44 GMT

kindly read here all the way through:
https://docs.splunk.com/Documentation/Splunk/8.0.0/Data/WhatSplunkcanmonitor

in general, Splunk can index any human readable data from any device leveraging different input techniques
to list some:
direct via port (TCP / UDP)
monitor files and directories
rest api calls
http event collection
scripted inputs (stdout of script)
data base collections
many more options

Re: What Data Collection Methods Splunk support ?

yantian — Wed, 06 Nov 2019 10:16:51 GMT

Thank you all for the reply. the URL is quite informative and helpful. cheers.