I need to monitor like 4 or 5 computer performances with splunk in a dashboard.
I know splunk has a monitor tool that collects data from the installed instance cpu, I'd like to know how could I do that as long as I have more cpu servers, one idea was to create a solution robot that gets data from Performance Monitor of all computers and then paste this file in a directory splunk can index but I'm not sure on how "real-time" this would be, is it possible to using the Local performance monitoring?
I'm not sure your requirement is possible,
but if you use Collect Windows performance data from a remote machine (WMI) data input, indexing is quite quick most of the time and there is normally unnoticeable. On my instance, the latency is around 10 seconds when using indexed realtime searching.
@markthompson - We are also trying to achieve something similar. Is there a document or tutorial or any further piece of information that can help us achieve this - "Collect WI from a remote machine and post to our splunk ". I am a novice to Splunk but need to implement this soon. ANy help would be greatly appreciated. Thanks in Advance!