Monitoring Splunk Enterprise overview

Splunk Enterprise provides two types of deployment monitoring:

• Monitoring Console (search-based monitoring).
• Proactive Splunk component monitoring (REST-based monitoring).

Monitoring Console

The Monitoring Console is a search-based monitoring tool that lets you view detailed information about the topology and performance of your Splunk Enterprise deployment. The Monitoring Console provides pre-built dashboards that give you visibility into many areas of your deployment, including search and indexing performance, resource usage, license usage, and more. You can use the Monitoring console to track the status of all types of deployment topologies, from single-instance (standalone) deployments to complex multi-site indexer clusters.

For more information, see About the Monitoring Console.

Proactive Splunk component monitoring

Proactive Splunk component monitoring is a REST-based monitoring tool that lets you view the health of Splunk Enterprise features from the output of a REST API endpoint. Individual features report their health status through a tree structure that provides a continuous, high-level view of the health of your deployment. You can access feature health status information using the splunkd health report in Splunk Web, or access feature health status information from the /server/health/splunkd endpoint.

For more information, see About proactive Splunk component monitoring.