Splunk® Content Packs for ITSI and IT Essentials Work

Splunk Content Packs for ITSI and IT Essentials Work

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Use the Hosts dashboard

The Hosts dashboard gives you a high-level view of all of the hosts in your Content Pack for Unix Dashboards and Reports deployment. It displays hosts in either a list or overview format and allows you to drill down into the specifics of a host's health and operation. It also lets you apply heat maps, which are graphical representations of data where individual value ranges are represented as colors, to the host views.

Hosts-unix.png

Perform the following steps to open the Hosts dashboard:

  1. In Splunk Web, open ITSI.
  2. Go to Dashboards > Dashboards.
  3. Open "Hosts - Unix" dashboard (with the App name as DA-ITSI-CP-unix-dashboards).

Host views

The Hosts dashboard displays information about hosts in two distinct views:

  • Node view, where each square in the view represents a single host.
  • List view, which is a text display of hosts with additional information about CPU, memory, disk and I/O.

The kind of data you can see depends on which view you are in.

List view

In list view, the Hosts dashboard displays a real-time list of hosts, groups, and CPU, memory, I/O, and disk performance metrics, constrained by the currently selected host category and group(s).

You can sort each column in ascending or descending order by clicking on the column's header. You can sort multiple columns by Alt-clicking (clicking with the Alt key held down) the column headers.

You can control which hosts display in the list by selecting the desired categories and groups in the host view control panel.

Node view

In node view, the Hosts dashboard displays a matrix of hosts, as defined by the currently selected host category and group(s). If you have selected more than one group, the dashboard separates hosts by group.

A host square represents a single host, and you can click on the host to get specific performance metrics for that host in an unobstructed side panel.

Node view also allows you to apply performance metric heat maps to the host squares to get an instantaneous view of per-host performance for CPU, memory, disk, and I/O metrics.

Host view control panel

The host view control panel lets you manipulate how the Hosts dashboard displays available hosts. The control panel has the following controls:

  • View: Lets you toggle between node and list views.
  • Category menu: Lets you choose a category of host groups, as you defined them when you configured the Content Pack for Unix Dashboards and Reports.
  • Group menu: Lets you choose one or more groups in the selected category.
  • Heatmap: Determines the heatmap that shows when the Hosts dashboard is in node view. This control is only available while in node view.
  • Size: Allows you to change the size of the host squares when the dashboard is in node view. These controls are only available while in node view.

The following additional controls only appear while in node view:

  • Number of hosts shown: Tells you how many hosts in the specific host category and group(s) that the Hosts dashboard currently shows.
  • Show more / fewer / all: Control how many hosts display in the Hosts dashboard when it is in node view. Clicking more shows more hosts in the selected category and group, and clicking less shows fewer hosts in the selected category and group.
  • Unpin all / compare: Allow you to compare a number of hosts at the same time. The Unpin all button removes pins from any hosts that you have pinned, and the Compare button updates the Hosts dashboard to display detailed performance metrics on hosts that you have pinned. For additional details, see Compare performance metrics on hosts.

Apply heat maps in node view

When in node view, you can apply a heat map to the currently displayed category and group(s) of hosts. Click the Heatmap menu to choose a heat map (one of CPU, Memory, I/O, or Disk). The Content Pack For Unix Dashboards and Reports updates the host view control panel to include color swatches which represent ranges of the performance metric for the selected heat map. It also updates the host squares in the dashboard in real-time to include heat map colors.

Get more information about a host

To get more information about a single host in a host group while in node view, perform the following steps.

  1. Use the Category and Group menu in the host view control panel to choose the group that the host is in.
  2. Use your mouse to hover over the host squares. The tool tip updates to show you the host name the square underneath your mouse pointer represents.
  3. When you've found the host you want to get information on, click once on the square that host represents.

The Content Pack for Unix Dashboards and Reports opens a "host information card" about the selected host on the far right side of the screen. This host information card displays specifications (number of CPUs, amount of RAM and disk), current system status and history, and the status of the top five processes on the host, based on CPU usage.

You can hover over the sparklines on the middle right side of the card to see individual metrics that the Content Pack for Unix Dashboards and Reports has collected recently for the host.

You can sort the process status information in the host information card in ascending or descending order by clicking the CPU, USER, pctCPU, pctMEM, and cpuTIME column headers.

The pin in the upper right corner of a loaded host information card allows you to keep this card available on the screen for possible comparison with other hosts later.

To pin an active host information card, click on the pin. The Content Pack for Unix Dashboards and Reports highlights the pin, and the information card remains on the dashboard when you select another host. You can only pin a host information card after it has finished loading its data.

To unpin a host information card, click on the pin again. The Content Pack for Unix Dashboards and Reports removes the highlight from the pin. When you click another host, the host information card updates with the new host's information.

To compare multiple hosts, follow the instructions in Compare performance metrics on hosts later in this topic.

Information displayed on host information cards does not update in real time. It represents a snapshot of the host's state when the card was opened. To see side-by-side comparisons of hosts in real time, use list view.

Compare performance metrics on hosts

The node view-only feature allows you to compare detailed performance metrics for any number of hosts in real time.

Node-view-unix.png

To use the comparison feature, perform the following steps:

  1. Pin the host information card. You must wait until all information on the host information card is updated before you can pin it and click on another host. Otherwise, the host information card is updated using the host you just clicked.
  2. Repeat this process to add up to four additional hosts. The Content Pack for Unix Dashboards and Reports overlays these hosts on top of hosts that you have already pinned.
  3. After you have chosen the hosts you want to compare, click Compare above the host information card. The Content Pack For Unix Dashboards and Reports darkens the Hosts dashboard view and displays the host information cards of all of the pinned hosts side-by-side.

To exit out of this comparison view, click anywhere outside of the displayed cards.

To remove pins from all pinned host information cards, click Unpin all.

Clear all customized host display information

To clear all customizations you have made to the Hosts dashboard, click Clear.

Last modified on 25 June, 2021
PREVIOUS
Use the Metrics dashboard
  NEXT
Use the Alerts dashboard

This documentation applies to the following versions of Splunk® Content Packs for ITSI and IT Essentials Work: current


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters