![splunk tstats splunk tstats](https://www.splunk.com/content/dam/splunk-blogs/images/en_us/2020/12/SolarWinds_IT_3.png)
Defaults to use the meta_woot_summary macro.ĩ. (optional) If you wish to have the summary data read from a different index, go to the macro page and edit the meta_woot_read_summary macro. (optional) If you wish to filter out certain indexes, sourcetypes, splunk_servers or hosts, go to the macro page and edit the meta_woot_index_filter, meta_woot_sourcetype_filter, meta_woot_splunk_server_filter and/or meta_woot_host_filter macros.Ĩ. (optional) If you wish to have the summary data write into a different index, go the macro page and edit the meta_woot_summary macro.ħ. The 15 min search is typically a good one to use.Ħ. Go to the search manager page and enable ONE of the "Generate Meta Woot Every X Min" searches.
#Splunk tstats free#
Default acceleration range is 7 days, but feel free to select a longer period.ĥ.
#Splunk tstats license#
Go to the Data Models page and enable the acceleration for the Meta Woot License Usage data model. (NOTE: See known issue at top - this must be edited for Splunk Cloud)Ĥ. Go to the search manager page and enable the "Generate Meta Woot Server GUID Lookup" search and RUN THE SEARCH to initially generate the lookup.
#Splunk tstats install#
Install the app on a search head or search head cluster.ģ.
![splunk tstats splunk tstats](https://miro.medium.com/max/1104/1*Pwmi_XPW88bUBVZxE_HFqA.png)
![splunk tstats splunk tstats](https://image.slidesharecdn.com/conf2014bmaciasnordstromitops-160621072841/95/splunk-in-nordstrom-it-operations-14-638.jpg)
Important: You do not need to run this if you are already on version 3 or higher. This search will modify the key used for the KV store and remediate an issue where keys could potentially be duplicated. If you are upgrading from version 2 to version 4 you must run the search named "Migrate Meta Woot Key" one time following the upgrade. New functionality added to report on estimated license usage.Filters added to allow for index exlusion from Meta Woot! Latency and Indexing Compliance dashboards.Meta Woot! no longer consumes Splunk license.Added descriptions for each dashboard to aid in understanding.This will be updated in a future release. | rename server_name AS splunk_server | outputlookup meta_woot_server_guid | stats latest(instance_guid) AS guid by server_name Index=_internal (host=idx* OR host=sh*) source="*metrics.log" instance_guid=* component=Metrics group=instance earliest=-6h Please change or clone the search and edit the search syntax as follows: As a result one of the searches named "Generate Meta Woot Server GUID Lookup" does not function. Splunk Cloud no longer allows for searching of REST API endpoints. For support, please email Fix for Known Issue in Splunk Cloud