I am trying to create Splunk classic dashboard to show the metrics of important Splunk errors like crash logs , logs that cause Splunk performance issues .
What are the Important Splunk error logs that need to be monitored In this case and where to find them?
Most of the important Splunk logs are in the _internal index. Sourcetype splunkd has most of them, but there are others which you may find useful. It all depends on what's important to you.
--- If this reply helps you, Karma would be appreciated.
