kinneygroup / itsi-nix-sysmon Goto Github PK

The ITSI Content Pack for Nix-Sysmon from Kinney Group is specifically designed to monitor system health related to Unix-based systems. It leverages Splunk ITSI to provide in-depth analysis and visualization of logs for various system components, ensuring critical systems are operating optimally. This content pack is an essential tool for IT professionals looking to enhance the reliability and performance of their infrastructure.

• Comprehensive Performance Monitoring: Offers detailed insights into CPU, memory, disk, network, and other critical system metrics, enabling optimized resource utilization.
• Critical System Status Tracking: Monitors the real-time operational status of system processes, services, and security events, helping IT professionals swiftly identify and address potential issues.
• Enhanced Resource Efficiency: Facilitates better decision-making on resource allocation and system adjustments by analyzing performance trends and detecting inefficiencies across the infrastructure.

This ITSI Content Pack is open source and available for community collaboration and enhancement on GitHub.

For more information about Kinney Group's Splunk Products, visit our website

The ITSI Content Pack for Nix-Sysmon contains service definitions and KPIs ready to import to ITSI. The KPI Thresholds and importance values are set to defaults so that they can be tuned manually for your use case. After configuration, this content pack provides a comprehensive view of system health and performance.

Kinney Group ITSI Content Pack Blog

For more information about Kinney Group's Splunk Products, visit our website

Nix-Sysmon monitoring encompasses several specialized services, each targeting specific aspects of system performance:

1. SystemHealth
   • Description: Monitors overall system health and performance.
2. CPU
   • Description: Monitors CPU performance and load.
3. Memory
   • Description: Monitors memory usage and swap space.
4. Disk
   • Description: Monitors disk usage, I/O operations, and latency.
5. Network
   • Description: Monitors network throughput, errors, and latency.
6. Processes
   • Description: Monitors the number of running processes and their load.
7. Services
   • Description: Monitors the status and performance of system services.
8. Logs
   • Description: Monitors system logs for errors, warnings, and informational messages.
9. Security
   • Description: Monitors security alerts, events, and incidents.

Each service utilizes specific KPIs to measure its effectiveness:

1. SystemHealth
   • Description: Monitors overall system health and performance.
2. CPU Pct
   • Description: Percentage of CPU usage.
3. Load Avg
   • Description: Average system load over a period.
4. CPU Ints
   • Description: Number of CPU interrupts.
5. Mem Usage
   • Description: Percentage of memory usage.
6. Swap Usage
   • Description: Percentage of swap space usage.
7. Mem Free
   • Description: Amount of free memory available.
8. Disk Usage
   • Description: Percentage of disk space used.
9. Disk IOPS
   • Description: Number of input/output operations per second.
10. Disk Latency
    • Description: Time taken for disk operations.
11. Net Throughput
    • Description: Amount of data transferred over the network.
12. Net Errors
    • Description: Number of network errors.
13. Net Drops
    • Description: Number of dropped network packets.
14. Proc Count
    • Description: Number of running processes.
15. Proc Load
    • Description: Load generated by processes.
16. Proc Zombies
    • Description: Number of zombie processes.
17. Svc Status
    • Description: Status of system services.
18. Svc Restarts
    • Description: Number of service restarts.
19. Svc Response
    • Description: Response time of system services.
20. Log Errors
    • Description: Number of error messages in logs.
21. Log Warnings
    • Description: Number of warning messages in logs.
22. Log Info
    • Description: Number of informational messages in logs.
23. Sec Alerts
    • Description: Number of security alerts.
24. Sec Events
    • Description: Number of security events.
25. Sec Incidents
    • Description: Number of security incidents.

Services are interconnected; for instance, SystemHealth is dependent on the CPU, Memory, Disk, Network, Processes, Services, Logs, and Security services. Each of these services provides critical metrics that contribute to the overall system health.

Some services form a hierarchy, such as SystemHealth depending on the aggregated metrics from CPU, Memory, Disk, Network, Processes, Services, Logs, and Security, illustrating a layered approach to performance monitoring where base metrics support broader performance indicators.

Splunk Addon for Unix and Linux

Splunk App for Content Packs

Splunk ITSI

Kinney Group ITSI Content Pack Blog

Github and Readme

[email protected]

To provide feedback, visit our Github and Readme for our content packs.

[email protected]

For more information about Kinney Group's Splunk Products, visit our website

Kinney Group ITSI Content Pack Blog