Archive

Introspection search_group assignment

Contributor

We're monitoring our splunk environment through the DMC as well as a hand built dashboard consisting of data from the _introspection index. Search looks like:

index=_introspection sourcetype=splunk_resource_usage component=Hostwide  search_group=Indexer | eval total_cpu_usage = 'data.cpu_system_pct' + 'data.cpu_user_pct'  | timechart  minspan=10s partial=f limit=25 Median(total_cpu_usage) AS cpu_usage by host
| eval max=100

We've recently added new servers, including new indexers, and have added them to the DMC successfully, along with assigning their roles there. However, we're not seeing the new servers in the above search. They don't have a searchgroup assignment. How do I assign the new servers a searchgroup?
Thank you

0 Karma
1 Solution

Contributor

Turns out it's assigned in a csv in my dashboard, so this is a silly question. Sorry to add to the noise.

View solution in original post

0 Karma

Contributor

Turns out it's assigned in a csv in my dashboard, so this is a silly question. Sorry to add to the noise.

View solution in original post

0 Karma