Splunk® Content Packs for ITSI and IT Essentials Work

Splunk Content Packs for ITSI and IT Essentials Work

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Use the Content Pack for Monitoring Microsoft Windows

Use the service template included with this content pack to either create an OS service or update existing services to include Windows OS-level monitoring.

Option 1: Create a new service for server monitoring

Perform the following steps for each group of servers where you want to monitor CPU, memory, disk space, and network traffic:

  1. Within ITSI, click Configuration > Services > Create Service > Create Service.
  2. Provide a name for the new service.
  3. Select Link service to a service template and choose the Windows server health template.
  4. Click Create.
  5. On the Entities tab, make changes as necessary to filter to the appropriate group of hosts.
  6. On the KPIs tab, select each KPI and expand the Thresholding panel to verify and edit thresholds as needed.
  7. Click Save > Save and Enable to save the service and begin running the KPI base searches.
  8. (Optional) Add KPIs for application monitoring and other functions as necessary.

For more information about adding entity rules, see Define entity rules for a service in ITSI in the Service Insights manual.

Option 2: Update existing services for server monitoring

Perform the following steps for each existing service where Windows OS-level monitoring is needed:

  1. Within ITSI, click Configuration > Services and open the service you want to update for server monitoring.
  2. Remove existing KPIs that you already provided in the Windows server health template.
  3. Click Save.
  4. Click Configure > Services and locate the service you just edited.
  5. Click Edit > Link to Service Template and select the Windows server health template.
  6. For the Update service entity rules field, choose Append template rules so the template rules are merged with the ones that already exist. For guidance, see Link and unlink services from service templates in ITSI.
  7. Click Link.
  8. Open the service you just linked.
  9. On the Entities tab, make changes as necessary to filter to the appropriate group of hosts.
  10. Click Save.
Last modified on 26 February, 2021
PREVIOUS
Install and configure the Content Pack for Monitoring Microsoft Windows
  NEXT
About the Content Pack for Monitoring Phantom as a Service

This documentation applies to the following versions of Splunk® Content Packs for ITSI and IT Essentials Work: current


Was this documentation topic helpful?

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters