Getting Data In

How can I pull in resource data stats from remote machines into a single instance of Spunk Enterprise to view everything from one spot?

egatchek
Engager

Hi,

I am trying to use one instance of Splunk Enterprise (Web) as a central place to be able to pull in resource usage data statistics for other servers/computers (CPU, Memory, HD, etc). I have set up a remote machine with the universal forwarder and have gotten it to report to Splunk Enterprise (Web) but it does not provide me with the real-time resource usage data I'm looking for. By default, the universal forwarders collect Windows logs but I'm pretty sure that doesn't include resource usage stats. How do I go about pulling in resource data stats from remote machines into a single instance of Spunk Enterprise so I can view everything from one spot? Thank you.

Evan

egatchek
Engager

What version of Splunk Enterprise are you using with the "Splunk Add-On for Microsoft Windows" add on? Is it compatible with Splunk 7.0.3?

0 Karma

brad_thomas
Explorer

I like the Splunk Add-On for Microsoft Windows https://splunkbase.splunk.com/app/742/ . We use it for monitoring CPU, Memory, Storage, Services Running, Scheduled Tasks & more.

You might also want to look into the Splunk App for Windows Infrastructure https://splunkbase.splunk.com/app/1680/ .

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Developer Spotlight with Denis Gladkikh

From Splunk Engineer to Kubernetes App Builder Denis GladkikhWhat happens when a lifelong developer turns a ...

Governing Enterprise AI, Bringing Cisco Telemetry Home, and More from Splunk Lantern

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...