Splunk Search

Does anyone have a sample CSV file with server health data (timestamp, CPU, etc) that I can index in Splunk to test operational analytics?

tmmet
New Member

Hi,

Could anyone please provide some information on the below?
If you have an excel/csv file with server health details for every 1 or 5 minutes that includes server information for positive and negative events (Ex: server downtime, server odd behavior etc.)

0 Karma

niketn
Legend

Following are three things I could think of for getting/generate Server performance KPI data (sample/live/actual)

1) If you are on Splunk Enterprise 7 or higher, you can explore Metrics Index with Sample CSV data and steps to upload the same from Splunk Documentation: http://docs.splunk.com/Documentation/Splunk/latest/Metrics/GetMetricsInOther
2) Eventgen app from Splunkbase can be used to schedule dummy data generation as per your need.
3) If you are running Splunk Enterprise on your personal machine, CPU, Memory and other Performance KPIs from your personal machine can be directly fed to Splunk. Following is a documentation for Windows Local Performance Monitoring using Splunk

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

jkat54
SplunkTrust
SplunkTrust
  1. Import file into splunk using "add data":
  2. Configure it as a csv sourcetype.
  3. Select the index you want to put it into (sounds like "main" will be fine because this appears to be your first installation)
  4. Use splunk processing language (search) to perform operational analytics - this part is up to you to understand but commands like stats, chart, table, and timechart will be most beneficial for you to understand and use.

http://docs.splunk.com/Documentation/Splunk/6.2.3/Data/Howtogetgoing

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Stats

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Chart

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Table

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Timechart

0 Karma

amit234
Engager

he wants CSV file , Sample Data

0 Karma

jpolcari
Communicator

You need to supply some more information. What are you looking to do with the data? With csv files, you can set up file/directory monitoring to import changes to the file into Splunk.

0 Karma

tmmet
New Member

I'm looking for a sample csv or excel file with server data (like CPU, timestamp, network input/output etc.) for operational analytics. The file containing both positive and negative server events (events where server had no issues and events that caused downtime or impacted the server).
I'm planning to use the sample file to do the test in Splunk. Appreciate your help. Thanks!

0 Karma
Get Updates on the Splunk Community!

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...