Splunk Cloud Platform

Monitor Data Ingestion Health and Latency  using cloud Monitoring Console APP under splunk cloud .

Praz_123
Communicator

What am following are as follows :-

1. Log into Monitoring Console :-

Login to splunk cloud UI
Search for cloud monitoring console under Apps 

2. Check Indexing health :-
         

Check Indexing Performance: Go to Indexing -> Indexing Performance 
Review ingestion rate trends.
Identify queue buildup (parsing, indexing, or pipeline queues).

3. Monitor data inputs

Go to Forwarders > Forwarders deployment 
Check forwarder connectivity and status.
Confirm data forwarding from Universal Forwarders or Heavy Forwarders.


what other steps can be included in this 

Labels (2)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @Praz_123 

This might highlight issues with getting data in to Splunk Cloud, but not necessarily issues outside the cloud environment itself.

What I meant by this is that you could have issues elsewhere that would not by captured here, for these you might want to create searches which checks that you are receiving the volume of events expected in a period of time, per index. This means if something slows down, or there are bottlenecks elsewhere that this can be detected. I personally use TrackMe app for this as it monitors all my sources and detects a number of issues - however you can do this yourself with some simple searches.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...