I am looking for some way to forwarder KPI (key Performance Indicators) of database server (for example MongoDB) to Splunk. Once data is indexed will be creating dashboards to monitor multiple servers.
Idea is to monitor KPI of multiple database servers (not necessarily only MongoDB . MongoDB is just one of the example)
Want to know how to forwarder these KPIs to Splunk indexer.
Is there any best practice/ known App/ script to forward KPIs (key Performance Indicators ) using forwarder to Splunk indexer?
This is a quite common or general feature of Splunk. KPI you have to decide because it will vary DB to DB and defer how you monitor and what server you monitor.
Below are the documents you need to Follow:
This will help you setup the forwarder and splunk instance.
This will help you putting input e.g. scripts/Perfmon KPI parameters.
Recommended Apps are there for Windows and Unix to get you started. You can also refer blogs to decide on the DB KPI parameters and add them in Inputs.conf file
when i meant for inputs for different DB i was referring to DB with different platforms. If you consider windows it will have perfmon counters which will give you the user connections, db size, transactions etc., which you can configure in inputs.conf like below.
interval = 10
object = SQLServer:General Statistics
counters = User Connections
The same you can get using a manual sql script
interval = 10
So this is the kind of input we can provide.
As per my understanding, KPIs of database will be in memory & not in file system or logs(please correct me if that is not the case)
If KPIs are in memory I am interested in methods (script?)to read KPIs. We can direct Splunk forwarder to send it to indexer. Looking for MongoDB and Cassendra.
More specifically I am interested in knowing how to read KPIs. As you mentioned reading database KPS is common feature of Splunk my question “is there any special App we can deploy to database server for reading KPIs” / Do we have any sample scripts for reading these KPIs?