Monitoring Splunk

Performance Monitoring CPU Usage, Memory Utilization monitoring from 3 different servers

meghasingh
Engager

Hi All,

We are very new to Splunk. Our project is trying to achieve the following: Could you please shed some light on what is the best possible way to achieve our scenario.
1. Performance monitoring of 3 servers(including the server where splunk is hosted) - CPU Usage, Memory Utilization, Free Disk Space, Event Logs monitoring.
2. These data need to be collected from 2 servers and sent to the third server where we have our Splunk site hosted.
3. Should we do this via the Universal Forwarder or write a script(.NET) that can collect these information and send to a DB. We already have a DB Connect App installed on Splunk which we are using for some transactions and ticket analysis.
4. Are there any other apps like DB connect(which connects splunk to DB) that can help us connect SPlunk to server performance metrics and we can index it directly.

Kindly suggest and advise.

Tags (1)
0 Karma
1 Solution

deepashri_123
Motivator

Hey meghasingh,

1.Performance monitoring can be done using Splunk Apps for your particular OS and is available in https://splunkbase.splunk.com/ which has pre-built dashboards.
2. You need to add forwarders on the servers from which data has to be sent on the splunk servers and monitor the path from which data has to be indexed.

Hope this helps!!

View solution in original post

0 Karma

deepashri_123
Motivator

Hey meghasingh,

1.Performance monitoring can be done using Splunk Apps for your particular OS and is available in https://splunkbase.splunk.com/ which has pre-built dashboards.
2. You need to add forwarders on the servers from which data has to be sent on the splunk servers and monitor the path from which data has to be indexed.

Hope this helps!!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...