Splunk ITSI Module for Cloud Services data model reference table
Use the below tables as a reference for the data models of this module. The tables contain a breakdown of the required tags for the event objects or searches in that model, and a listing of all extracted and calculated fields included in the model. Data models can be edited by navigating to Settings > Data models
For information on how to map your data to the data models available in the Splunk IT Service Intelligence Modules, see the below links:
- How to use these reference tables in the Common Information Model Add-on Manual.
- About data models in the Splunk Enterprise Knowledge Manager Manual.
Tags used with event objects
The following tags act as constraints to identify your events as being relevant to this data model.
Object name | Tag name (Constraint) | Tag name (Inherited) |
---|---|---|
Performance | cloud_*, performance | |
|
cloud_virtualization, virtualmachine | cloud_*, performance |
|
cpu | cloud_*, performance, cloud_virtualization, virtualmachine |
|
network | cloud_*, performance, cloud_virtualization, virtualmachine |
Inventory | cloud_*, inventory | |
|
cloud_virtualization, virtualmachine | cloud_*, inventory |
Fields for Cloud Services Module event objects
The following table lists the extracted and calculated fields for the event objects in the model. Note that it does not include any inherited fields.
Object name | Field name | Data type | Description |
---|---|---|---|
Performance | tag
|
String | Tag. |
Virtual Machine | network_usage
|
Number | Total of network_usage_in + network_usage_out .
|
Virtual Machine | vm_id
|
String | Unique Identifier (UUID) for virtual machine. |
CPU | cpu_load_percent
|
Number | CPU load in percentage |
Network | network_packets_in
|
Number | The volume of incoming traffic in terms of the number of packets on a single instance. |
Network | network_packets_out
|
Number | The volume of outgoing traffic in terms of the number of packets on a single instance. |
Network | network_usage_in
|
Number | Volume of incoming network traffic, in bytes, to an application on a single instance. |
Network | network_usage_out
|
Number | Volume of outgoing network traffic, in bytes, to an application on a single instance. |
Inventory | custom_tag
|
String | Customer defined tags. |
Inventory | tag
|
String | Tag. |
Inventory | vendor
|
String | Vendor name of the virtualization software. |
Inventory | vendor_product
|
String | Vendor-given official name for the virtualization software. |
Inventory | role
|
String | |
Virtual Machine | account_id
|
String | Unique identifier for the cloud service account. |
Virtual Machine | cpu_cores
|
Number | Count of CPU cores available on the system. |
Virtual Machine | hypervisor_name
|
String | Name of the hypervisor. |
Virtual Machine | ip
|
String | IP address of the system. |
Virtual Machine | mem_capacity
|
Number | Total memory capacity in bytes. |
Virtual Machine | power_state
|
String | Current power status of Virtual Machine (example: poweredOn or poweredOff). |
Virtual Machine | region
|
String | Geo location where the virtual machine is hosted. |
Virtual Machine | storage_capacity
|
Number | |
Virtual Machine | virtual_network_id
|
String | The virtual network to which the virtual machine belongs. |
Virtual Machine | virtual_subnet_id
|
String | |
Virtual Machine | vm_id
|
String | Unique Identifier (UUID) for virtual machine. |
Virtual Machine | vm_name
|
String | Name of virtual machine. |
Virtual Machine | vm_size
|
String |
PREVIOUS Cloud Services Module KPIs and Thresholds |
NEXT Entity attributes table |
This documentation applies to the following versions of Splunk® ITSI Module for Cloud Services (deprecated): 2.4.0
Feedback submitted, thanks!