Splunk Search

What are the best event-data inputs for basic server & OS monitoring?

sloshburch
Splunk Employee
Splunk Employee

I want to implement the basic key searches defined in What are the best practice searches for Server & OS monitoring. There appears to be many potential inputs for data collection in the OS's add-ons. What are the necessary data inputs to make the basic key searches work correctly?

0 Karma
1 Solution

sloshburch
Splunk Employee
Splunk Employee

Replaced the answer with its new homes.

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...