Yes, my splunk is up and works fine, also my statsd deamon works fine because receive metrics from mother hosts, only the input on splunk doesn't works, I understand the statsd and splunk use the same port but I only follow the documentation. https://docs.splunk.com/Documentation/Splunk/8.0.1/Metrics/GetMetricsInStatsd ... View more

Hi, looks like metrics collection is more performing than a event collection, also you have 2 methods to collect the data. look the documentation https://docs.splunk.com/Documentation/Splunk/7.3.1/Metrics/GetMetricsInStatsd Alessandro ... View more

Hi, 50 append kill your splunk instance, try to reduce the number of append or try to use multisearch. N.B you can use a number of multisearch like the number of your cores prensent in your cpu. Alessandro ... View more

I mean a kpi datapoint without entities, I suppose if I split the kpi datapoint by entities I will expect 3 events. ... View more

have you used http event collector? ... View more