Getting server metrics from Splunk Infrastructure ...

brent_weaver · ‎02-09-2019

We are just beginning to use iTSI and I would like to create some KPI's that are splunk servers, cpu, memory and disk space. This data seems to already be in the splunk internal indices, I just dont know where... Does anyone?

Any help is much appreciated.

renjith_nair · ‎02-09-2019

@brent_weaver ,

Probably you are looking for

index="_introspection" sourcetype=splunk_resource_usage

By default, it's disabled on a universal forwarder.

Resources to read -
About Splunk Enterprise platform instrumentation
Configure platform instrumentation

---
What goes around comes around. If it helps, hit it with Karma 🙂

Getting server metrics from Splunk Infrastructure Servers

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Join the Conversation