All Apps and Add-ons

Not seeing my data

SLowry
New Member

I've installed the Splunk App for Windows on a server, the Universal Forwarder & the Splunk TA for Windows on numerous Windows servers. I did not include the performace counters in the Universal Forwarder.
When I open the Performance Managemnt tab in the App, the only data available is from the server where Splunk is installed. How do I get the data from the other servers to display? I can see that the hosts are sending data.

0 Karma

gregb
Explorer

Hi, am I understanding your question correctly: you would like to go back and install the server monitor/performance app which Splunk does during the msi install on windows?
Also, do you use a deployment server?

0 Karma

jcaffero
Explorer

I haven't personally used that App, so I'm not sure but one option I would check for is if Splunk is configured to receive those files. Similar to the Add Data function in Search.

0 Karma
Get Updates on the Splunk Community!

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...

What’s New in Splunk Observability Cloud: January Feature Highlights & Deep Dives

Splunk Observability Cloud continues to evolve, empowering engineering and operations teams with advanced ...