All Apps and Add-ons

Not seeing my data

SLowry
New Member

I've installed the Splunk App for Windows on a server, the Universal Forwarder & the Splunk TA for Windows on numerous Windows servers. I did not include the performace counters in the Universal Forwarder.
When I open the Performance Managemnt tab in the App, the only data available is from the server where Splunk is installed. How do I get the data from the other servers to display? I can see that the hosts are sending data.

0 Karma

gregb
Explorer

Hi, am I understanding your question correctly: you would like to go back and install the server monitor/performance app which Splunk does during the msi install on windows?
Also, do you use a deployment server?

0 Karma

jcaffero
Explorer

I haven't personally used that App, so I'm not sure but one option I would check for is if Splunk is configured to receive those files. Similar to the Add Data function in Search.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...