Alerting

Receiving High CPU utilization alerts . how to troubleshoot and find rootcause.

alexspunkshell
Contributor

I am receiving CPU utilization alerts frequently. Please help me how to troubleshoot and find rootcause.

alexspunkshell_0-1605010564467.png

@thambisetty @isoutamo 

Labels (4)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Is you haven't set up mc yet now it's time to do it. Can you log to cm with web GUI? From there you could use mc for IDX cluster. If not then your only option is do queries towards internal indexes, if you have rights for it. 
r. Ismo

View solution in original post

0 Karma

alexspunkshell
Contributor

I enabled MC from CM and from CM i can see performace for indexers.

Thanks much @thambisetty @isoutamo 

0 Karma

thambisetty
SplunkTrust
SplunkTrust

what are these servers roles Indexers OR HF. you can always check Monitoring console if they are Indexers.

————————————
If this helps, give a like below.
0 Karma

alexspunkshell
Contributor

These are indexers. I don't have access to login into indexers from frontend to check monitoring console.

@thambisetty 

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Is you haven't set up mc yet now it's time to do it. Can you log to cm with web GUI? From there you could use mc for IDX cluster. If not then your only option is do queries towards internal indexes, if you have rights for it. 
r. Ismo

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...