We are just beginning to use iTSI and I would like to create some KPI's that are splunk servers, cpu, memory and disk space. This data seems to already be in the splunk internal indices, I just dont know where... Does anyone?
Any help is much appreciated.
Probably you are looking for
By default, it's disabled on a universal forwarder.
Resources to read -
About Splunk Enterprise platform instrumentation
Configure platform instrumentation