How to create a Dashboard\query that gathers all OS warnings of monitored server?

[olivera]

I recently started collecting data from my servers with the Add-On for unix and linux. I did a dashboard with pannels like CPU, RAM, storage by usage by mount point, services and their status...

Now I want to create a dashboard that will collect all the warnings from the panels and will show it in a nice table. For example, if the file system usage is above 90 percent, show it in the dashboard and if someone cleaned it it will automatically disappear from the panel.

I find it hard to collect all warnings in one panel because my data comes from different sourcetypes.

Can you please help me?? I don't have a clue from where to start or what SPL queries to do. 

Thank you

[PickleRick]

Splunk on its own is not a monitoring solution, but data gathering and processing one. So if you just store measurements of some performance parameters it doesn't know on its own if they are "good" or "bad". It's up to you to tell Splunk how to make sense of this data.

You probably can use apps which might have some of this functionality predefined already but that will depend on what you want to monitor. You can also check ITSI (paid premium app, probably not what you're looking for at the moment) or IT Essentials Work.