Getting server metrics from Splunk Infrastructure ...

brent_weaver · ‎02-09-2019

We are just beginning to use iTSI and I would like to create some KPI's that are splunk servers, cpu, memory and disk space. This data seems to already be in the splunk internal indices, I just dont know where... Does anyone?

Any help is much appreciated.

renjith_nair · ‎02-09-2019

@brent_weaver ,

Probably you are looking for

index="_introspection" sourcetype=splunk_resource_usage

By default, it's disabled on a universal forwarder.

Resources to read -
About Splunk Enterprise platform instrumentation
Configure platform instrumentation

---
What goes around comes around. If it helps, hit it with Karma 🙂

Getting server metrics from Splunk Infrastructure Servers

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Splunk App Dev Quarterly Roundup: AI, Agents, and Innovation!

Federated Search for Dynamic Data Self Storage Is Now Generally Available on Splunk ...

Index This | What has many keys but can’t unlock a door?

Join the Conversation