Monitor data

If you want to monitor files and network ports on your instance, navigate to the Monitor page in Splunk Web:

1. From the Splunk Web system bar, click Settings.
2. Choose the Add Data page.
3. Click the Monitor page.

The Monitor page

From the Monitor page, choose the type of data that you want to monitor. Default inputs appear first, followed by forwarded inputs, then any modular inputs that are on the instance.

The Monitor page shows only the types of data sources that you can monitor, which depends on the type of Splunk deployment you have. If you're running Splunk Enterprise, the page also shows you the platform that the instance runs on. See Types of data sources for more information on what can monitor.

Add a data input

Some data sources are available only on certain operating systems. For example, Windows data sources are available only on machines that run Windows. Splunk Cloud Platform cannot monitor Windows inputs directly because it doesn't run on Windows, but you can forward data from a universal forwarder that runs Windows to Splunk Cloud Platform.

1. Select a source by clicking it once. The page updates based on the source you selected.
2. Follow the on-screen prompts to complete the selection of the source object that you want to monitor.
3. Click Next to proceed to the next step in the Add data process.

If you experience problems with these steps, the logged-in Splunk user account might not have permissions to add data or see the data source that you want to add.

Next step

Assign the correct source type to your data