Monitoring Splunk

Remote Performance monitoring in Splunk server on Linux

rajeshm
Explorer

Hi

We have installed Splunk indexer on Linux and also windows application in it.

We are not getting the following option in data inputs.

Local event log collection.
Remote event log collections.
Local performance monitoring.
Remote performance monitoring.
Registry monitoring.
Active Directory monitoring.

Want to monitor remote windows machine using WMI.

Regards

Rajesh

Tags (1)
0 Karma

Ayn
Legend

You cannot monitor WMI data from a Linux indexer, as WMI polling uses native Windows syscalls.

dwaddle
SplunkTrust
SplunkTrust

You could install a single Windows-based forwarder just for the purpose of doing remote WMI off of your other Windows systems.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...