How to add data to Splunk App for Infrastructure

To configure data collection, you must log in to an account with administrator privileges.

Configure data collection to add data to the Splunk App for Infrastructure and start monitoring metrics and logs for your hosts. You can collect data from Linux hosts, AWS instances, Windows hosts, and Mac OS X hosts. Use the easy install script to configure data collection, or configure data collection manually.

For information about operating system requirements for data collection, see Operating system support for data collection.

Collect data from Linux Servers

Collect data for these metrics:

• cpu
• df
• disk
• interface
• load
• memory

Collect data for these log sources:

• Internal logs for debugging
• /var/log/syslog
• /var/log/daemon.log
• /var/log/auth.log

You can also add custom log sources.

To use the easy install script to collect data, see Configure Linux/Unix data collection for Splunk App for Infrastructure.

To manually configure data collection, see

• Manually configure metrics collection on a *nix host for Splunk App for Infrastructure
• Manually configure log collection on a *nix host for Splunk App for Infrastructure

Collect data from Windows Servers

Collect data for these metrics:

• cpu
• physical_disk
• network
• memory
• system
• process
• logical_disk

Collect data for these log sources:

• Internal logs for debugging
• Application
• Security
• System
• Forwarded Events
• Setup

You can also add custom log sources.

To use the easy install script to collect data, see Collect Windows metrics and logs with Splunk App for Infrastructure.

Collect data from Mac OS X Servers

Collect data for these metrics:

• cpu
• df
• disk
• interface
• load
• memory

Collect data for these log sources:

• Internal logs for debugging
• /var/log/system.log

You can also add custom log sources.

To use the easy install script to collect data, see Configure Mac OS X Data Collection for Splunk App for Infrastructure.

To manually configure data collection, see

• Manually configure metrics collection on a *nix host for Splunk App for Infrastructure
• Manually configure log collection on a *nix host for Splunk App for Infrastructure

Collect data from AWS instances

You can collect AWS data from one AWS account a time. To set up AWS data collection, you will need your AWS account's Key ID, Secret Key, and Region Category. You can collect these data from these AWS services:

• EC2
• EBS
• ELB
• CloudWatch

For more information, see Configure AWS data collection for Splunk App for Infrastructure.