About the Splunk App for Windows Infrastructure
The Splunk App for Windows Infrastructure gives you deep visibility into the health and performance of your Microsoft Windows Server and Active Directory environments.
It includes components that let you monitor system, server, network, and printer availability. It includes modules which allow you to monitor other aspects of your Windows network, including:
- Microsoft Windows Server (through the separately available Splunk Add-on for Windows)
- Microsoft Windows Server Active Directory (through the included Splunk Add-on for Active Directory suite)
Use the Splunk App for Windows Infrastructure to:
- Identify infrastructure problems, such as non-running services and load issues
- Monitor the performance of all servers throughout your Windows environment
- Monitor security events, such as virus outbreaks and anomalous logons
- Track administrative changes to the environment
- Plan for capacity expansion
Important: Read and understand the Splunk App for Windows Infrastructure's platform and hardware requirements before downloading and attempting to install the app. Also, learn what data the app collects.
How does it work?
Splunk universal forwarders gather logs and performance metrics from the following components of your Microsoft Windows deployment:
- Windows Server (via the Splunk Add-on for Windows)
- Active Directory
and send them to a central Splunk instance that runs Splunk App for Windows Infrastructure. The app provides reports and dashboards that allow you to review the status of your Windows services.
The Splunk App for Windows provides several specialized features to monitor Windows Server and Client data. Dashboard views include:
Provides information about the data that is being collected and reported on by the app
Contains information on all the events generated by the event log channels being monitored—such as Application, System and Security
Contains information on CPU, memory, physical disk, LogicalDisk, network interface and system
Contains information on application crashes, application installs and Windows Updates
Correlation across your Enterprise Infrastructure
Combine your Windows Infrastructure data from other technology tiers, such as applications, other operating systems, storage and network devices to gain complete end-to-end service level insight.
The Splunk App for Windows Infrastructure requires a supported version of Splunk Enterprise and a supported version of Windows Server. See the platform and hardware requirements for details on operating system and Splunk Enterprise versions.
How do I get it?
The Splunk App for Windows Infrastructure is available for download from Splunkbase.
How do I install it?
The Splunk App for Windows Infrastructure has a revamped installation procedure. See "How to deploy the Splunk App for Windows Infrastructure" to read about it.
How do I upgrade from a previous version?
If you already run a previous version of the Splunk App for Windows Infrastructure, you can follow the upgrade instructions.
For information on what's new, as well as any known issues in this version, review the release notes.
New to Splunk?
This documentation applies to the following versions of Splunk® App for Windows Infrastructure: 1.2.0