Monitoring Splunk

Remote Performance monitoring in Splunk server on Linux

rajeshm
Explorer

Hi

We have installed Splunk indexer on Linux and also windows application in it.

We are not getting the following option in data inputs.

Local event log collection.
Remote event log collections.
Local performance monitoring.
Remote performance monitoring.
Registry monitoring.
Active Directory monitoring.

Want to monitor remote windows machine using WMI.

Regards

Rajesh

Tags (1)
0 Karma

Ayn
Legend

You cannot monitor WMI data from a Linux indexer, as WMI polling uses native Windows syscalls.

dwaddle
SplunkTrust
SplunkTrust

You could install a single Windows-based forwarder just for the purpose of doing remote WMI off of your other Windows systems.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...