Splunk Search

What would you include on a Splunk "daily checklist"?

nnimbe
Path Finder

Hi Team,

I am new to Splunk and want to create a Splunk daily checklist which includes,
total number of devices reporting, devices not reported since last 1 day, Splunk performance usage, Splunk data indexed per day, Splunk EPS, new devices reported since last 1 day (or in case of any other important parameter to monitor)

Can anybody help me with the list of commands which will helpful for the analysts to perform on day to day basis and can be used as Splunk checklist on daily basis, (or if you have any existing checklist then please share).

The idea is to monitor the Splunk infra on daily basis wrt all the parameters and ensure Splunk will be running up and fine without any issue.

0 Karma
1 Solution

esix_splunk
Splunk Employee
Splunk Employee

Use the DMC, and also check out the health checks. You can customize these for a particular set of Splunk features. Check here for more information : http://docs.splunk.com/Documentation/Splunk/6.6.3/DMC/Customizehealthcheck

View solution in original post

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Use the DMC, and also check out the health checks. You can customize these for a particular set of Splunk features. Check here for more information : http://docs.splunk.com/Documentation/Splunk/6.6.3/DMC/Customizehealthcheck

0 Karma

skoelpin
SplunkTrust
SplunkTrust

Have you looked into the Monitoring Console yet? This gives you a great idea about the health of your Splunk systems

https://docs.splunk.com/Documentation/Splunk/6.6.2/DMC/DMCoverview

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...