Solved: Query to monitor linux server health. - Splunk Community

Deployment Architecture

Is there a base query that can give me the server health of my linux servers? I know Windows servers have index=perfmon.

1 Solution

Solution

hey you can try installing splunk add-on for linux
https://splunkbase.splunk.com/app/833/

Install this add-on on the linux machine on which you want to monitor server health.
http://docs.splunk.com/Documentation/UnixAddOn/5.2.4/User/InstalltheSplunkAdd-onforUnixandLinux#Inst...

Enable the inputs and then restart the splunk server
http://docs.splunk.com/Documentation/UnixAddOn/5.2.4/User/Enabledataandscriptedinputs

and then on the splunk GUI
search for index=os

For more info, refer this doc
let me know if this helps!

View solution in original post

Solution

hey you can try installing splunk add-on for linux
https://splunkbase.splunk.com/app/833/

Install this add-on on the linux machine on which you want to monitor server health.
http://docs.splunk.com/Documentation/UnixAddOn/5.2.4/User/InstalltheSplunkAdd-onforUnixandLinux#Inst...

Enable the inputs and then restart the splunk server
http://docs.splunk.com/Documentation/UnixAddOn/5.2.4/User/Enabledataandscriptedinputs

and then on the splunk GUI
search for index=os

For more info, refer this doc
let me know if this helps!

Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...