What am following are as follows :-
1. Log into Monitoring Console :-
Login to splunk cloud UI
Search for cloud monitoring console under Apps
2. Check Indexing health :-
Check Indexing Performance: Go to Indexing -> Indexing Performance
Review ingestion rate trends.
Identify queue buildup (parsing, indexing, or pipeline queues).
3. Monitor data inputs
Go to Forwarders > Forwarders deployment
Check forwarder connectivity and status.
Confirm data forwarding from Universal Forwarders or Heavy Forwarders.
what other steps can be included in this
Hi @Praz_123
This might highlight issues with getting data in to Splunk Cloud, but not necessarily issues outside the cloud environment itself.
What I meant by this is that you could have issues elsewhere that would not by captured here, for these you might want to create searches which checks that you are receiving the volume of events expected in a period of time, per index. This means if something slows down, or there are bottlenecks elsewhere that this can be detected. I personally use TrackMe app for this as it monitors all my sources and detects a number of issues - however you can do this yourself with some simple searches.
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing