Pros and cons / Prerequisite of deploying Splunk Trackme App in on-prem instance

[man03359]

Hi Team,

Hope this message finds you well.

I have a new splunk on-premise instance and we are planning to implement Splunk Trackme app on our SHC to monitor any data latency, missing data etc. for our instance. 

I read through few docs (https://trackme.readthedocs.io/en/latest/deployment.html)  that says it is resource consuming. I want to understand if it will impact our license consumption apart from CPU and memory post deployment. Also do we need any separate license for the splunk track-me.

What are cons of it.

Pls reply soon, thanks in advance 🙂

[man03359]

Can someone pls help me with it 
@gcusello 

[gcusello]

Hi @man03359 ,

I didn't used this app.

Anyway, it uses a summary index (that didn't consume license) and a metric index, that could consume license, 150bytes for each event.

About CPU and RAM, surely it will use a part of them, the only way is to install it and monitor your resources.

Ciao.

Giuseppe