Good day,
I am brand new to Splunk. I am constructing a dashboard to monitor the status of our SCCM environment. I have so far figured out monitoring event logs and serviceaccount stats. My current challenge is verifying the status of the CM database. I am not trying to index the database into Splunk, although we have the Splunk DB Connect App installed if that is what needs to happen. I just want to be able to look at the dashboard and see that CM_* is OnLine.
I appreciate any assistance that might be afforded to me.
Ron Jones
The SCCM App for Splunk (https://splunkbase.splunk.com/app/2750/) is a bit old, but may give you some ideas about how to solve your problem.
The SCCM App for Splunk (https://splunkbase.splunk.com/app/2750/) is a bit old, but may give you some ideas about how to solve your problem.
I'll instal it today. Loking at what's available on ine I'll still need to do somework, but it is a start.
Thank you
@noy72, Did it work? If so, please accept the answer to help future readers.