Hi,
I am trying to use one instance of Splunk Enterprise (Web) as a central place to be able to pull in resource usage data statistics for other servers/computers (CPU, Memory, HD, etc). I have set up a remote machine with the universal forwarder and have gotten it to report to Splunk Enterprise (Web) but it does not provide me with the real-time resource usage data I'm looking for. By default, the universal forwarders collect Windows logs but I'm pretty sure that doesn't include resource usage stats. How do I go about pulling in resource data stats from remote machines into a single instance of Spunk Enterprise so I can view everything from one spot? Thank you.
Evan
What version of Splunk Enterprise are you using with the "Splunk Add-On for Microsoft Windows" add on? Is it compatible with Splunk 7.0.3?
I like the Splunk Add-On for Microsoft Windows https://splunkbase.splunk.com/app/742/ . We use it for monitoring CPU, Memory, Storage, Services Running, Scheduled Tasks & more.
You might also want to look into the Splunk App for Windows Infrastructure https://splunkbase.splunk.com/app/1680/ .