All Apps and Add-ons

Not seeing my data

SLowry
New Member

I've installed the Splunk App for Windows on a server, the Universal Forwarder & the Splunk TA for Windows on numerous Windows servers. I did not include the performace counters in the Universal Forwarder.
When I open the Performance Managemnt tab in the App, the only data available is from the server where Splunk is installed. How do I get the data from the other servers to display? I can see that the hosts are sending data.

0 Karma

gregb
Explorer

Hi, am I understanding your question correctly: you would like to go back and install the server monitor/performance app which Splunk does during the msi install on windows?
Also, do you use a deployment server?

0 Karma

jcaffero
Explorer

I haven't personally used that App, so I'm not sure but one option I would check for is if Splunk is configured to receive those files. Similar to the Add Data function in Search.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Auto Ingestion Parallel Pipeline Scaling

Why this feature matters Many Splunk environments experience ingestion pressure long before the host is fully ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...