All Apps and Add-ons

Not seeing my data

SLowry
New Member

I've installed the Splunk App for Windows on a server, the Universal Forwarder & the Splunk TA for Windows on numerous Windows servers. I did not include the performace counters in the Universal Forwarder.
When I open the Performance Managemnt tab in the App, the only data available is from the server where Splunk is installed. How do I get the data from the other servers to display? I can see that the hosts are sending data.

0 Karma

gregb
Explorer

Hi, am I understanding your question correctly: you would like to go back and install the server monitor/performance app which Splunk does during the msi install on windows?
Also, do you use a deployment server?

0 Karma

jcaffero
Explorer

I haven't personally used that App, so I'm not sure but one option I would check for is if Splunk is configured to receive those files. Similar to the Add Data function in Search.

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...