Is there a Splunk TA that can collect all system related logs?

[bharadwaja30]

Hi,

We are actually trying to collect the following data from a universal forwarder and index it in Splunk. Following are the various types of data we are looking for.

a. Ping response
b. CPU pct used
c. All file systems, %used, %free
d. INODES, %used, %free
e. IPCS, CBYTES & Queue
f. IO Wait
g. System Load
h. Top processes consuming res memory, virtual memory, cpu

Will we be getting any logs from Universal forwarder by default which will contain all the above data. Or is there any Splunk TA that will help us in getting the above logs.

Once we get these logs we are planning to create some dashboards for the purpose of monitoring.

Regards,
A.Bharadwaja

[gcusello · Accepted solution]

Hi A.Bharadwaja,
you should see in apps.splunk.com the TAs you need.
Anyway, probably Splunk Add-on for Unix and Linux ( https://splunkbase.splunk.com/app/833/ ) should solve the most problems.
Other interesting TA could be Splunk Add-on for Linux https://splunkbase.splunk.com/app/3412/
As Apps you can find:
Splunk App for Unix and Linux https://splunkbase.splunk.com/app/273/
Linux Auditd https://splunkbase.splunk.com/app/2642/
Bye.
Giuseppe

[bharadwaja30]

Hi Giuseppe,

Thank you for responding. We would be checking the mentioned Apps and Add-ons. Thanks again.

[gcusello]

When, you'll be ready, remeber to accept or upvote this answer.
Bye.
Giuseppe