Hi !
If you haven't yet, please take a look at Nmon documentation: http://nmon-for-splunk.readthedocs.io
You have video tutorial that will show you how to install and deploy: https://www.youtube.com/watch?v=-0H-CJDIGDI
On the instance(s) acting as search heads, install the Nmon performance core application.
If you want to get performance data from these search heads, also deploy the TA-nmon.
On standalone indexers, deploy the TA-nmon.
On clustered indexers, deploy the PA-nmon. (provided in the resources directory of the core app package)
On your deployment server, create a server class, associate with your Universal forwarders clients instances, and add the TA-nmon to be deployed. (enable restart splunkd)
You will have off course unarchived the TA-nmon package in $SPLUNK_HOME/etc/deployment-apps/
Let me know if this is unclear.
Guilhem
... View more