Splunk Search

What would you include on a Splunk "daily checklist"?

Path Finder

Hi Team,

I am new to Splunk and want to create a Splunk daily checklist which includes,
total number of devices reporting, devices not reported since last 1 day, Splunk performance usage, Splunk data indexed per day, Splunk EPS, new devices reported since last 1 day (or in case of any other important parameter to monitor)

Can anybody help me with the list of commands which will helpful for the analysts to perform on day to day basis and can be used as Splunk checklist on daily basis, (or if you have any existing checklist then please share).

The idea is to monitor the Splunk infra on daily basis wrt all the parameters and ensure Splunk will be running up and fine without any issue.

0 Karma
1 Solution

Splunk Employee
Splunk Employee

Use the DMC, and also check out the health checks. You can customize these for a particular set of Splunk features. Check here for more information : http://docs.splunk.com/Documentation/Splunk/6.6.3/DMC/Customizehealthcheck

View solution in original post

0 Karma

Splunk Employee
Splunk Employee

Use the DMC, and also check out the health checks. You can customize these for a particular set of Splunk features. Check here for more information : http://docs.splunk.com/Documentation/Splunk/6.6.3/DMC/Customizehealthcheck

View solution in original post

0 Karma

SplunkTrust
SplunkTrust

Have you looked into the Monitoring Console yet? This gives you a great idea about the health of your Splunk systems

https://docs.splunk.com/Documentation/Splunk/6.6.2/DMC/DMCoverview

0 Karma