Splunk Agent Network Statistics

[barne_dn]

Is there a way for the splunk agent to log exactly how much traffic it sent over the network?

I'm trying to get an idea of how much traffic an agent generates for a specific configuration.

I'm not looking to get the network utilization of the entire machine. I just want to know exactly how much the agent is sending and receiving. For example, I would like to know that my agent is sending an average of 1KB/sec, which means 60KB/minute or 3.6MB/hour.

Thanks!

[Ron_Naken]

Install the Deployment Monitor app and view the "All Forwarders" tab:

http://splunk-base.splunk.com/apps/67836/splunk-deployment-monitor

Among the many things it displays, it should show you events per second, as well as how much data is being sent per forwarder.

The Splunk on Splunk app provides another view for forwarder data volume on the Metrics tab. You can split by Forwarder on the "Estimated incoming network volume" panel:

http://splunk-base.splunk.com/apps/29008/sos-splunk-on-splunk