Documentation for _introspection Index

[PotatoDataUser]

So I want to build a dashboard with _introspection index , some of the metrics I am looking for are THP (enabled/disabled), Ulimits, CPU, Mem, Disk usage, swap usage, clocks sync (realtime & hardware) etc.

I couldnt find any solid documentation for _introspection index as to under which source, component these variables will be stored also what all data is available in the index. 

Can someone please point me to a doumented list of all the data points in the index if any docs exists. Also any specific component/source I can find the KPIs I mentioned above.

[dural_yyz]

https://docs.splunk.com/Documentation/Splunk/9.3.2/RESTREF/RESTintrospect#server.2Fsysinfo

| rest /services/server/sysinfo
| table splunk_server transparent_hugepage.effective_state

The above will get you the THP status per server, usually best to run from the DMC in a multi server environment - most if not all devices should be reported there.  Running from a SH or SHC may be limited to SH and IDX.

https://docs.splunk.com/Documentation/Splunk/9.3.2/RESTREF/RESTintrospect#server.2Fstatus.2Fresource...

| rest /services/server/status/resource-usage/hostwide
| table splunk_server *cpu* *mem*

[richgalloway]

That is a Splunk internal index so any documentation (if it exists) would be internal to Splunk.  You may be able to find some useful information in the Troubleshooting Manual or the REST API Reference Manual.