Splunk Search

what is this introspection?

a212830
Champion

Hi,

Just upgraded to Splunk 6.1.1 and I noticed a new process running (introspection) and a new index (which, btw, isn't created by default and causes a bunch of errors).

What does it do and how can I utilize it?

Tags (2)
1 Solution

dwaddle
SplunkTrust
SplunkTrust

The _introspection index is part of Splunk 6.1's "Platform Instrumentation" features. This is intended to collect information about your systems running Splunk and give you more data to help diagnose Splunk performance issues. There are some details about what data is collected at http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Abouttheplatforminstrumentationfr...

Similar to the Splunk on Splunk app (http://apps.splunk.com/app/748/), Platform Instrumentation is a way for you to Splunk your Splunk so you can tell how well your Splunk is Splunking.

alt text

View solution in original post

dwaddle
SplunkTrust
SplunkTrust

The _introspection index is part of Splunk 6.1's "Platform Instrumentation" features. This is intended to collect information about your systems running Splunk and give you more data to help diagnose Splunk performance issues. There are some details about what data is collected at http://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Abouttheplatforminstrumentationfr...

Similar to the Splunk on Splunk app (http://apps.splunk.com/app/748/), Platform Instrumentation is a way for you to Splunk your Splunk so you can tell how well your Splunk is Splunking.

alt text

cboillot
Contributor

is the the same as the introspection_generator_addon app?

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...