Monitoring Splunk

Infrastructure monitoring in Splunk

vaneet
Explorer

How we can accomplish infrastructure monitoring in Splunk to monitor CPU/MEM/Disk ?

Labels (1)
0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi @vaneet,

which kind of infratructure are you speaking: Windows and Linux server or other?

If you want to monitor resources of Windows and Linux servers, you can use:

to take the data.

then to implement the Use Cases (Dashboards, Alerts and Reports), you can use some apps from Splunk base, e.g.:

Or otherwise you can create your own dashboards using the data ingested with the Add-Ons, eventually starting from some search that you can find in the above apps.

When you have to start something, always before see in Splunkbase!

Ciao.

Giuseppe

View solution in original post

thormanrd
Path Finder

Having been a Splunk admin at a large telco for a few years now, I have simplified our monitoring to a few searches on _introspection index.  Very fast and lightweight searches that I bundle in my own app and deploy through Splunk Secure Gateway to the Splunk Mobile app and Splunk TV.  Keeps our admin team aware of critical measures like cpu, disc, iostats.  Also use the cluster master REST API to watch the status of my indexers (e.g. Up, Down, maintenance mode, etc).  Works well and has kept me out of trouble several times.  

0 Karma

ekenne06
Path Finder

Splunk introduced the Splunk App for Infrastructure (SAI)

https://splunkbase.splunk.com/app/3975/

https://splunkbase.splunk.com/app/4217/

 

This application utilizes collectd (linux)/WMI(windows) and metrics to monitor CDM, plus a bunch of other components. 

https://docs.splunk.com/Documentation/AddOns/released/Linux/Configure

https://docs.splunk.com/Documentation/Splunk/8.1.1/Metrics/GetMetricsInCollectd

 

 

gcusello
SplunkTrust
SplunkTrust

Hi @vaneet,

which kind of infratructure are you speaking: Windows and Linux server or other?

If you want to monitor resources of Windows and Linux servers, you can use:

to take the data.

then to implement the Use Cases (Dashboards, Alerts and Reports), you can use some apps from Splunk base, e.g.:

Or otherwise you can create your own dashboards using the data ingested with the Add-Ons, eventually starting from some search that you can find in the above apps.

When you have to start something, always before see in Splunkbase!

Ciao.

Giuseppe

Get Updates on the Splunk Community!

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Get Inspired! We’ve Got Validation that Your Hard Work is Paying Off

We love our Splunk Community and want you to feel inspired by all your hard work! Eric Fusilero, our VP of ...

What's New in Splunk Enterprise 9.4: Features to Power Your Digital Resilience

Hey Splunky People! We are excited to share the latest updates in Splunk Enterprise 9.4. In this release we ...