Splunk® Content Packs for ITSI and IT Essentials Work

Splunk Content Packs for ITSI and IT Essentials Work

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Use the Content Pack for Splunk Synthetic Monitoring

After you install and configure the content pack, you can immediately start monitoring your web applications' performance. The content pack contains several useful views and dashboards that provide visibility into the different metrics of your applications.

Monitor your web applications' services

The service analyzer included in this content pack provides instant, real-time visibility into the performance of your web applications with granular, composite performance metrics across the entire service tree. Detect service anomalies faster with visibility into the performance of each one of the service components that affect your applications' overall performance.

To access the custom Splunk Synthetic Monitoring service analyzer, select Service Analyzer > Default Analyzer from the ITSI menu.

"Screenshot of APM Service Analyzer"

Select Tree view to view your service tree.

CP for Synthetic Monitoring - Tree View.png

Customize and save the Service Analyzer

To make customizations to the service analyzer, use the Filter services field to only show synthetic checks that are relevant to you. When the service analyzer is filtered to the checks you want to monitor select Save as... to create a new service analyzer.

Monitor your applications' entities

The content pack includes 5 custom entity types that group entities originating from the Splunk Synthetic Monitoring Add-on.

  1. Synthetic API
  2. Synthetic Benchmark
  3. Synthetic Content
  4. Synthetic HTTP
  5. Synthetic Real Browser

View Entity Health

To view the Entity Health page for the entity type, follow these steps:

  1. From the ITSI menu or IT Essentials Work menu, select Infrastructure Overview.
  2. In the Group by dropdown, choose Entity Type.
  3. Select the one of the synthetic entity types.

View Entity Details

On the Entity Health page to drill down further into specific entity follow these steps:

  1. Select an entity.
  2. Use the Select a Check... dropdown to go to the entity details page for the check you would like to review.

CP for Synthetic Monitoring - Event Detail.png

Navigate to Splunk Synthetic Monitoring from an entity

Each entity is set up with navigation links to allow you to quickly navigate to Splunk Synthetic Monitoring. To do so, follow these steps:

  1. From the entity details page, select the Open entity information panel.
    CP for Synthetic Monitoring - Entity Info.png
  2. Select one of the navigation suggestions:
    1. Open this Check in Splunk Synthetic Monitoring.
    2. Open the Last Run of this Check in Splunk Synthetic Monitoring including Filmstrip and Waterfall.
      CP for Synthetic Monitoring - SSM Navigations.png

For more information about entity types, see Overview of entity types in ITSI in the Entity Integrations manual.

Set up alerts for your applications

Because acceptable metrics vary by application, the synthetics services don't have alert thresholds set up by default. Go to the KPI Alerting documentation for steps to set up alert thresholds to generate notable events for your services and KPIs.

Once you set up alerts for your KPIs they are aggregated into meaningful episodes on the Episode Review page. To monitor and investigate all episodes for your applications, go to Episode Review. You can drill down into individual episodes to perform more granular root-cause analysis.

For more information about navigating and using Episode Review, go to the Overview of Episode Review in ITSI in the Event Analytics manual.

Last modified on 12 August, 2021
PREVIOUS
Create a custom configuration of the Content Pack for Splunk Synthetic Monitoring
  NEXT
KPI reference for the Content Pack for Splunk Synthetic Monitoring

This documentation applies to the following versions of Splunk® Content Packs for ITSI and IT Essentials Work: current


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters