https://community.splunk.com/t5/Splunk-Search/What-is-this-introspection/m-p/170616#M186386 <P>The <CODE>_introspection</CODE> index is part of Splunk 6.1's "Platform Instrumentation" features. This is intended to collect information about your systems running Splunk and give you more data to help diagnose Splunk performance issues. There are some details about what data is collected at <A href="http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Abouttheplatforminstrumentationframework">http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Abouttheplatforminstrumentationframework</A></P> <P>Similar to the Splunk on Splunk app (<A href="http://apps.splunk.com/app/748/">http://apps.splunk.com/app/748/</A>), Platform Instrumentation is a way for you to Splunk your Splunk so you can tell how well your Splunk is Splunking.</P> <P><IMG src="http://cdn.memegenerator.net/instances/500x/50028878.jpg" alt="alt text" /></P> Tue, 20 May 2014 12:49:34 GMT dwaddle 2014-05-20T12:49:34Z https://community.splunk.com/t5/Splunk-Search/What-is-this-introspection/m-p/170615#M186385 <P>Hi,</P> <P>Just upgraded to Splunk 6.1.1 and I noticed a new process running (introspection) and a new index (which, btw, isn't created by default and causes a bunch of errors).</P> <P>What does it do and how can I utilize it?</P> Mon, 12 Dec 2022 14:57:45 GMT https://community.splunk.com/t5/Splunk-Search/What-is-this-introspection/m-p/170615#M186385 a212830 2022-12-12T14:57:45Z https://community.splunk.com/t5/Splunk-Search/What-is-this-introspection/m-p/170616#M186386 <P>The <CODE>_introspection</CODE> index is part of Splunk 6.1's "Platform Instrumentation" features. This is intended to collect information about your systems running Splunk and give you more data to help diagnose Splunk performance issues. There are some details about what data is collected at <A href="http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Abouttheplatforminstrumentationframework">http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Abouttheplatforminstrumentationframework</A></P> <P>Similar to the Splunk on Splunk app (<A href="http://apps.splunk.com/app/748/">http://apps.splunk.com/app/748/</A>), Platform Instrumentation is a way for you to Splunk your Splunk so you can tell how well your Splunk is Splunking.</P> <P><IMG src="http://cdn.memegenerator.net/instances/500x/50028878.jpg" alt="alt text" /></P> Tue, 20 May 2014 12:49:34 GMT https://community.splunk.com/t5/Splunk-Search/What-is-this-introspection/m-p/170616#M186386 dwaddle 2014-05-20T12:49:34Z https://community.splunk.com/t5/Splunk-Search/What-is-this-introspection/m-p/170617#M186387 <P>is the the same as the introspection_generator_addon app?</P> Tue, 29 Sep 2020 18:33:10 GMT https://community.splunk.com/t5/Splunk-Search/What-is-this-introspection/m-p/170617#M186387 cboillot 2020-09-29T18:33:10Z https://community.splunk.com/t5/Splunk-Search/What-is-this-introspection/m-p/623933#M216920 <P>Yes. As per the same docs mentioned above (<A href="https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Abouttheplatforminstrumentationframework?_ga=2.122660747.1624717064.1670785670-475813162.1667870888" target="_blank" rel="noopener">https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Abouttheplatforminstrumentationframework</A>)<BR /><BR />"<SPAN>Platform instrumentation is included in Splunk Enterprise as an add-on, sometimes referred to as the&nbsp;</SPAN>introspection_generator_addon"</P> Sun, 11 Dec 2022 19:14:48 GMT https://community.splunk.com/t5/Splunk-Search/What-is-this-introspection/m-p/623933#M216920 SandyaArunn 2022-12-11T19:14:48Z