Deployment Architecture

Getting server metrics from Splunk Infrastructure Servers


We are just beginning to use iTSI and I would like to create some KPI's that are splunk servers, cpu, memory and disk space. This data seems to already be in the splunk internal indices, I just dont know where... Does anyone?

Any help is much appreciated.

Tags (1)
0 Karma


@brent_weaver ,

Probably you are looking for

index="_introspection" sourcetype=splunk_resource_usage

By default, it's disabled on a universal forwarder.

Resources to read -
About Splunk Enterprise platform instrumentation
Configure platform instrumentation

Happy Splunking!
0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>