- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Monitor CPU Usage on Splunk Forwarder in the S...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
My configuration is:
1. A Splunk Server used as a Forwarder who's gathering datas from the local machine
2. A Splunk Server used as Indexer who's indexing and showing those datas on some dashboards
What I need is to show the Splunk Forwarder Server CPU usage on the Splunk Indexer Server but I can't figure a way to do so...
Is there any solutions?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk On Splunk, or S.O.S, is an easy way to make this happen. You can get that app here: https://apps.splunk.com/app/748/
You can install the app on both of your servers or just have the app on one and the S.O.S. TA on the other.
Another option, if you're using 6.2.x is to utilize the distributed management console. S.O.S. and the distributed management console are both very useful options that have some overlapping features. S.O.S. isn't officially supported but the DMC is.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@np75014 Any luck?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks. I've been trying it this week and this is doing the job. Actually for a second step i'd like to get thoses datas via the splunk sdk C# so i'm trying to figure a way to work on that.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk On Splunk, or S.O.S, is an easy way to make this happen. You can get that app here: https://apps.splunk.com/app/748/
You can install the app on both of your servers or just have the app on one and the S.O.S. TA on the other.
Another option, if you're using 6.2.x is to utilize the distributed management console. S.O.S. and the distributed management console are both very useful options that have some overlapping features. S.O.S. isn't officially supported but the DMC is.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Sorry, but I do not see any info about resource usage in DMC/SoS.
In DMC there is only network info (Outgoing Data Rate). In SoS -- only about indexers.
Could you please specify where exactly I should look info about cpu usage of forwarders.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did this with app for Unix: https://answers.splunk.com/answers/294559/how-to-collect-cpu-and-memory-logs-from-a-unix-for.html
Infographic provides the TL;DR for the 2024 Splunk Career Impact Report
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
