Скачать или смотреть Using Splunk to search, alert and visualize metrics data being collected in a metrics based index

This video will build on the previous videos where I configured a deployment server to push out an app configured to collect metrics from Windows and Unix/Linux endpoints and installation of IT Essentials Learn/Work.

I will cover using 3 Splunk search commands (mstats, mpreview and mcatalog) built to work with metrics data that has been collected in a metrics index. I will start with some basic searches with each command to show the output and talk about how I use them.

Next I will dive into the Analytics Workspace found in the Splunk Search and Reporting app. The Analytics Workspace provides a user interface that enables you to monitor and analyze metrics and other time series without using SPL

From Analytics Workspace I will demonstrate how easy it is to create either a dashboard or an alert. You can also use the Analytics Workspace to help you learn the “mstats” search command.

The last part of the video will go back into IT Essentials Work. Here I will go over Entity Type configuration and how to adjust the vital metrics being displayed in Infrastructure Overview of IT Essentials Work.

Splunk documentation links:

Splunk Mstats search command:
https://docs.splunk.com/Documentation...

Splunk Mpreview search command:
https://docs.splunk.com/Documentation...

Splunk Mcatalog search command:
https://docs.splunk.com/Documentation...

Splunk Analytics Workspace:
https://docs.splunk.com/Documentation...