Deployment Architecture

Is it possible to identify Disk latency on Splunk indexers?


hi All,

Recently we have seens bucket corruption issues in our cluster. Upon chekcing with support they concluded that the root cause might be disk latency issues. Is it possible to monitor the Disk Health parameters of indexer servers in Splunk ?


0 Karma


You can look for resource usage for every splunk servers under DMC in Resource Usage tab like
CPU usage
Memory Usage
Disk Usage
I/O operations
I/O bandwidth utilization

You can also look for resource_usage.log for _introspection index for a particular splunk server

0 Karma


Take a look at the Distributed Management Console, it should help you detect problems on your indexers, including poor disk performance (located on the Resource dashboards). You can configure a single DMC to collect data from all of your indexers and search heads.

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!