Deployment Architecture

Getting server metrics from Splunk Infrastructure Servers


We are just beginning to use iTSI and I would like to create some KPI's that are splunk servers, cpu, memory and disk space. This data seems to already be in the splunk internal indices, I just dont know where... Does anyone?

Any help is much appreciated.

Tags (1)
0 Karma


@brent_weaver ,

Probably you are looking for

index="_introspection" sourcetype=splunk_resource_usage

By default, it's disabled on a universal forwarder.

Resources to read -
About Splunk Enterprise platform instrumentation
Configure platform instrumentation

0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!