All Apps and Add-ons

Not seeing my data

SLowry
New Member

I've installed the Splunk App for Windows on a server, the Universal Forwarder & the Splunk TA for Windows on numerous Windows servers. I did not include the performace counters in the Universal Forwarder.
When I open the Performance Managemnt tab in the App, the only data available is from the server where Splunk is installed. How do I get the data from the other servers to display? I can see that the hosts are sending data.

0 Karma

gregb
Explorer

Hi, am I understanding your question correctly: you would like to go back and install the server monitor/performance app which Splunk does during the msi install on windows?
Also, do you use a deployment server?

0 Karma

jcaffero
Explorer

I haven't personally used that App, so I'm not sure but one option I would check for is if Splunk is configured to receive those files. Similar to the Add Data function in Search.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How much can you really learn in 3 minutes?

Observability can certainly be hard to understand – there's a lot of jargon and buzzwords and it seems to ...

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...