Splunk Search

What would you include on a Splunk "daily checklist"?

nnimbe
Path Finder

Hi Team,

I am new to Splunk and want to create a Splunk daily checklist which includes,
total number of devices reporting, devices not reported since last 1 day, Splunk performance usage, Splunk data indexed per day, Splunk EPS, new devices reported since last 1 day (or in case of any other important parameter to monitor)

Can anybody help me with the list of commands which will helpful for the analysts to perform on day to day basis and can be used as Splunk checklist on daily basis, (or if you have any existing checklist then please share).

The idea is to monitor the Splunk infra on daily basis wrt all the parameters and ensure Splunk will be running up and fine without any issue.

0 Karma
1 Solution

esix_splunk
Splunk Employee
Splunk Employee

Use the DMC, and also check out the health checks. You can customize these for a particular set of Splunk features. Check here for more information : http://docs.splunk.com/Documentation/Splunk/6.6.3/DMC/Customizehealthcheck

View solution in original post

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Use the DMC, and also check out the health checks. You can customize these for a particular set of Splunk features. Check here for more information : http://docs.splunk.com/Documentation/Splunk/6.6.3/DMC/Customizehealthcheck

0 Karma

skoelpin
SplunkTrust
SplunkTrust

Have you looked into the Monitoring Console yet? This gives you a great idea about the health of your Splunk systems

https://docs.splunk.com/Documentation/Splunk/6.6.2/DMC/DMCoverview

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...