All Apps and Add-ons

Is there a Splunk TA that can collect all system related logs?

bharadwaja30
Explorer

Hi,

We are actually trying to collect the following data from a universal forwarder and index it in Splunk. Following are the various types of data we are looking for.

a. Ping response
b. CPU pct used
c. All file systems, %used, %free
d. INODES, %used, %free
e. IPCS, CBYTES & Queue
f. IO Wait
g. System Load
h. Top processes consuming res memory, virtual memory, cpu

Will we be getting any logs from Universal forwarder by default which will contain all the above data. Or is there any Splunk TA that will help us in getting the above logs.

Once we get these logs we are planning to create some dashboards for the purpose of monitoring.

Regards,
A.Bharadwaja

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi A.Bharadwaja,
you should see in apps.splunk.com the TAs you need.
Anyway, probably Splunk Add-on for Unix and Linux ( https://splunkbase.splunk.com/app/833/ ) should solve the most problems.
Other interesting TA could be Splunk Add-on for Linux https://splunkbase.splunk.com/app/3412/
As Apps you can find:
Splunk App for Unix and Linux https://splunkbase.splunk.com/app/273/
Linux Auditd https://splunkbase.splunk.com/app/2642/
Bye.
Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi A.Bharadwaja,
you should see in apps.splunk.com the TAs you need.
Anyway, probably Splunk Add-on for Unix and Linux ( https://splunkbase.splunk.com/app/833/ ) should solve the most problems.
Other interesting TA could be Splunk Add-on for Linux https://splunkbase.splunk.com/app/3412/
As Apps you can find:
Splunk App for Unix and Linux https://splunkbase.splunk.com/app/273/
Linux Auditd https://splunkbase.splunk.com/app/2642/
Bye.
Giuseppe

bharadwaja30
Explorer

Hi Giuseppe,

Thank you for responding. We would be checking the mentioned Apps and Add-ons. Thanks again.

0 Karma

gcusello
SplunkTrust
SplunkTrust

When, you'll be ready, remeber to accept or upvote this answer.
Bye.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...