Hello Splunkers,
I want to ask you about Splunk Universal Forwarder memory, CPU and DISK I/O consumption monitoring on client machines because I can do this only with a full Splunk Enterprise instance using a DMC server but can't do that with Splunk universal forwarder.
Is there any solution? and I'm so thankful.
If you are running AIX/Linux/Solaris you could also consider the NMON Performance Monitor for Unix and Linux Systems for Splunk
It's a separate application that does detailed monitoring of AIX/Linux/Solaris, it cannot run on Windows as nmon does not exist on that platform.
You can install Splunk Add-on for Unix/Windows on your universal forwarders to monitor and forward those information to your indexers. See below for more details on Unix Add on apps.
http://docs.splunk.com/Documentation/UnixAddOn/5.2.4/User/AbouttheSplunkAdd-onforUnixandLinux
http://docs.splunk.com/Documentation/WindowsAddOn/latest/User/AbouttheSplunkAdd-onforWindows