Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Monitor CPU Usage on Splunk Forwarder in the S...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
My configuration is:
1. A Splunk Server used as a Forwarder who's gathering datas from the local machine
2. A Splunk Server used as Indexer who's indexing and showing those datas on some dashboards
What I need is to show the Splunk Forwarder Server CPU usage on the Splunk Indexer Server but I can't figure a way to do so...
Is there any solutions?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk On Splunk, or S.O.S, is an easy way to make this happen. You can get that app here: https://apps.splunk.com/app/748/
You can install the app on both of your servers or just have the app on one and the S.O.S. TA on the other.
Another option, if you're using 6.2.x is to utilize the distributed management console. S.O.S. and the distributed management console are both very useful options that have some overlapping features. S.O.S. isn't officially supported but the DMC is.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@np75014 Any luck?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks. I've been trying it this week and this is doing the job. Actually for a second step i'd like to get thoses datas via the splunk sdk C# so i'm trying to figure a way to work on that.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk On Splunk, or S.O.S, is an easy way to make this happen. You can get that app here: https://apps.splunk.com/app/748/
You can install the app on both of your servers or just have the app on one and the S.O.S. TA on the other.
Another option, if you're using 6.2.x is to utilize the distributed management console. S.O.S. and the distributed management console are both very useful options that have some overlapping features. S.O.S. isn't officially supported but the DMC is.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Sorry, but I do not see any info about resource usage in DMC/SoS.
In DMC there is only network info (Outgoing Data Rate). In SoS -- only about indexers.
Could you please specify where exactly I should look info about cpu usage of forwarders.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Did this with app for Unix: https://answers.splunk.com/answers/294559/how-to-collect-cpu-and-memory-logs-from-a-unix-for.html
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
[Puzzles] Solve, Learn, Repeat: Matching cron expressions
Design, Compete, Win: Submit Your Best Splunk Dashboards for a .conf26 Pass
May 2026 Splunk Expert Sessions: Security & Observability
