Getting Data In

Can I remotely monitor Windows performance using a universal forwarder or do I have to install Splunk and then forward WMI?

Bliide
Path Finder

I am trying to troubleshoot a performance issue on a server on our network. I would like to setup some Windows Performance monitoring on the server. Can I remotely monitor Windows performance using a Universal Forwarder to get the data to the indexer or do I have to install Splunk Enterprise on the system and then forward WMI to the indexer?

0 Karma

thomrs
Communicator

Splunk App for Windows Infrastructure does much of this OTB. Part is free, need to pay or the AD part I believe.

https://apps.splunk.com/app/1680/

I´m looking to do just this after seeing the demo at Splunk live.

0 Karma

Bliide
Path Finder

Thank you for the advice. I will try it out.

0 Karma
Get Updates on the Splunk Community!

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...