- Splunk Answers
- :
- Splunk Administration
- :
- Monitoring Splunk
- :
- Re: How to monitor CPU utilization using splunk
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to monitor CPU utilization using splunk
Hi,
I want to get information about CPU utilization by splunk server.Is there any query for this or i need to write any external script for this.So that splunk can index that file and show it in dashboard.Please guide me.
Thanks,
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
okay i read the splunk for nix docs a little closer and found the answer to my own question. never mind.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I downvoted this post because doesn't provide valuable input
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Iam asking for both windows 64 and unix too
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would recommend you look at the already-existing "Splunk for *Nix" and "Splunk for Windows" apps, both of which do this already for common operating systems.
http://splunk-base.splunk.com/apps/22315/splunk-app-for-windows
http://splunk-base.splunk.com/apps/22314/splunk-for-unix-and-linux
If by some incredible misfortune these do not support the system you are trying to collect from, they would still be good jumping-off points for learning how to support the same thing for your own systems.
Also, both of these are "Splunk Supported" meaning that if you have Enterprise support you can submit enhancement requests against them and be able to get Splunk themselves to work on improvements. http://splunk-base.splunk.com/answers/4844/how-can-i-submit-an-enhancement-request
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
okay i read the splunk for nix docs a little closer and found the answer to my own question. never mind.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
found this answer, and it got me part way to what i wanted. I installed splunk-app-for-unix on my indexer and splunk-add-on-for-unix on each of my two universal fowarders. those forwarders have been working (sending other application data) for some time. however, after installing what i expected to be this OS status app, the splunk app for unix windows shows data for the indexer only. the other two hosts don't appear. regular search shows that pertinent data are coming across, so what have misconfigured? haven't found a button in the app-for-unix to tell it use other hosts' data.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
what OS your splunk is running?
More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk
.conf24 | Personalize your .conf experience with Learning Paths!
Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...
