Zeema
New design
Catalogue / monitoring

Splunk Enterprise

Monitoringsplunk

Self-hosted machine data index fed by forwarders.

Provider
default
Kind
Monitoring
Category
Operations
Official docs
https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.4/configuration-file-reference/10.4.0-configuration-file-reference/indexes.conf
Properties · 4 set by this component
propertytypevaluesrequiredkind defaultthis component
alertGroupingboolean—nofalseinherited
collectorModeenumpull | pushnopull▸ push
forwarderBased · component propertyboolean—notrueinherited
frozenAction · component propertyenumdelete | archivenodeleteinherited
independentOfMonitoredboolean—nofalseinherited
managedboolean—nofalse▸ false
retentionDaysinteger—no—▸ 2184
signalenummetrics | logs | traces | alerts | allnometrics▸ logs
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "splunk", component: "splunk" }
Other Monitoring products · 174
ActionTrailalibaba-actiontrailalibabacloudmonitoringApplication Real-Time Monitoring Servicealibaba-armsalibabacloudmonitoringCloudMonitoralibaba-cloud-monitoralibabacloudmonitoringDatabase Autonomy Servicealibaba-dasalibabacloudmonitoringSimple Log Servicealibaba-log-servicealibabacloudmonitoringSecurity Centeralibaba-security-centeralibabacloudmonitoringAmazon CloudWatch investigationsaws-aiopsawsmonitoringAWS Audit Manageraws-audit-managerawsmonitoringAWS CloudTrailaws-cloudtrailawsmonitoringAWS CloudTrail Lakeaws-cloudtrail-lakeawsmonitoringAmazon CloudWatch Application Insightsaws-cloudwatch-application-insightsawsmonitoringAmazon CloudWatch Application Signalsaws-cloudwatch-application-signalsawsmonitoringAmazon CloudWatch Internet Monitoraws-cloudwatch-internet-monitorawsmonitoringAmazon CloudWatch Logsaws-cloudwatch-logsawsmonitoringAmazon CloudWatch Network Flow Monitoraws-cloudwatch-network-flow-monitorawsmonitoringAmazon CloudWatch Network Monitoraws-cloudwatch-network-monitorawsmonitoringAmazon CloudWatch RUMaws-cloudwatch-rumawsmonitoringAmazon CloudWatch Syntheticsaws-cloudwatch-syntheticsawsmonitoringAmazon CodeGuru Profileraws-codeguru-profilerawsmonitoringAWS Compute Optimizeraws-compute-optimizerawsmonitoringAmazon Detectiveaws-detectiveawsmonitoringAmazon DevOps Guruaws-devops-guruawsmonitoringAmazon GuardDutyaws-guarddutyawsmonitoringAmazon Inspectoraws-inspectorawsmonitoringAWS IoT Device Defenderaws-iot-device-defenderawsmonitoringAmazon Macieaws-macieawsmonitoringAmazon Managed Grafanaaws-managed-grafanaawsmonitoringAmazon Managed Service for Prometheusaws-managed-prometheusawsmonitoringAWS Migration Hubaws-migration-hubawsmonitoringAWS Resilience Hubaws-resilience-hubawsmonitoringAWS Security Hub CSPMaws-security-hubawsmonitoringAWS Security Incident Responseaws-security-incident-responseawsmonitoringAWS Trusted Advisoraws-trusted-advisorawsmonitoringAWS X-Rayaws-xrayawsmonitoringAmazon CloudWatchcloudwatchawsmonitoringAzure Advisorazure-advisorazuremonitoringApplication Insightsazure-application-insightsazuremonitoringMicrosoft Defender External Attack Surface Managementazure-defender-easmazuremonitoringMicrosoft Defender for Cloudazure-defender-for-cloudazuremonitoringMicrosoft Defender for IoTazure-defender-for-iotazuremonitoring
and 134 more → Monitoring page
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Splunk Enterprise: self-hosted index of machine data; forwarders push events to indexers and buckets roll
# to frozen after frozenTimePeriodInSecs = 188697600 (6 years), deleted unless archived ("indexes.conf").
schemaVersion: "1"
type: "component"
id: "splunk"
kind: "monitoring"
provider: "default"
docs: "https://help.splunk.com/en/splunk-enterprise/administer/admin-manual/10.4/configuration-file-reference/10.4.0-configuration-file-reference/indexes.conf"
defaults:
  signal: "logs"
  collectorMode: "push"
  managed: false
  retentionDays: 2184
properties:
  frozenAction:
    type: "enum"
    values: ["delete", "archive"]
    default: "delete"
  forwarderBased:
    type: "boolean"
    default: true

The same page as markdown, for an agent: /catalogue/components/splunk.md