Getting Data In

Splunk Agent Network Statistics


Is there a way for the splunk agent to log exactly how much traffic it sent over the network?

I'm trying to get an idea of how much traffic an agent generates for a specific configuration.

I'm not looking to get the network utilization of the entire machine. I just want to know exactly how much the agent is sending and receiving. For example, I would like to know that my agent is sending an average of 1KB/sec, which means 60KB/minute or 3.6MB/hour.


0 Karma

Splunk Employee
Splunk Employee

Install the Deployment Monitor app and view the "All Forwarders" tab:

Among the many things it displays, it should show you events per second, as well as how much data is being sent per forwarder.

The Splunk on Splunk app provides another view for forwarder data volume on the Metrics tab. You can split by Forwarder on the "Estimated incoming network volume" panel:
0 Karma
Get Updates on the Splunk Community!

User Groups | Upcoming Events!

If by chance you weren't already aware, the Splunk Community is host to numerous User Groups, organized ...

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...