Welcome to TrackMe - Data in motion tracking system

TrackMe has transitioned to a new licensing model.

• The Free Community Edition has been discontinued.

• What this means for you:

  • Existing licensed customers are not impacted. Your current license continues unchanged.

  • Community users are automatically upgraded to a Foundation Edition trial for 90 days, with full functionality enabled.

• After the trial period:

  • TrackMe remains active and fully usable for monitoring

  • The platform enters read-only mode

  • You can continue to view data, dashboards, alerts, and history

  • Creation of new tenants, trackers, or entities will be disabled

  • To continue using TrackMe with full capabilities after the trial, a Foundation license is required.

Buy Foundation Edition: https://trackme-solutions.com/get-foundation/

See all plans and pricing: https://trackme-solutions.com/pricing/

Contact us: contact@trackme-solutions.com

The PDF version of this documentation is available here.

TrackMe for Splunk is the ideal companion for your Splunk deployment, no matter the size of your environment. Its unique capabilities help you on a daily basis to get the best value from your Splunk investments:

• Discover and maintain Splunk entities at scale, track availability and quality of any kind of data in Splunk

• Virtual tenancy is a key concept in TrackMe which allows creating on the fly knowledge objects in a repeatable way: create and scope tenants, experiment, destroy and restart as needed

• TrackMe allows tracking your local Splunk deployment, or transparently any number of Splunk remote deployments (subject to licensing restrictions)

• TrackMe’s unique workflow combines best Splunk capabilities, from a comprehensive user interface to notable events generation, SLA tracking and many more

• Get the best from TrackMe components, using splk-feeds components provide deep Splunk feed tracking, splk-cim provides Common Information Model (CIM) compliance tracking, splk-flx (FLEX) adapts to any kind of Splunk magic query! (components are subject to license restrictions)

• Extend the visibility at any point in time with Hybrid and Elastic trackers, use Machine Learning outliers detection with deep and easy control, TrackMe is incredibly rich in features

Getting started with TrackMe

Quickstart Guide

Our quickstart guide covers all the steps needed to get TrackMe up and running, from installation to your first tracker configuration.

QUICK START - Starting with TrackMe: (feed tracking quickstart)

Installation

Step-by-step installation instructions for TrackMe on Splunk Enterprise and Splunk Cloud, including requirements and configuration.

Installation of TrackMe

Product Guide

The complete guide to configuring and using TrackMe: virtual tenants, trackers and components, monitoring states, alerting, machine learning, operations and integrations.

Introduction

Use Cases:

Use Cases

• Quickstart
  • QUICK START - Starting with TrackMe: (feed tracking quickstart)
  • QUICK START - TrackMe Impact-Based Alerting (IBA)
  • QUICK START - Design and automate through lookup knowledge
  • QUICK START - Cross-tenant domain views with Virtual Groups
• Use-case demos
  • Use Case Demo: This is All About Feeds
  • Use Case Demo: 360 Services Monitoring with TrackMe
  • Use Case Demo: Fields Quality (CIM and non-CIM)
  • Flex Objects - Adapt TrackMe to any monitoring use case (splk-flx)
• TrackMe Use Cases Referential — Overview
  • Why a referential
  • The five layers
  • How to use this referential
  • How TrackMe is structured (recap)
  • What this referential does NOT replace
  • Conventions used across this referential

Artificial Intelligence:

Artificial Intelligence

• Artificial Intelligence in TrackMe
  • Overview
  • Requirements & compatibility
  • The AI Journey
  • The three pillars
  • What’s in this section
• Configuring AI Provider accounts
  • Overview
  • Managing provider accounts
  • Provider Fields
  • Supported Providers
  • Global AI settings
  • Next steps
• AI Assistant & Concierge
  • AI Assistant
  • The AI Concierge
• The AI Advisors
  • Overview
  • Inspect or Act — the operational contract
  • Two ways to run an advisor
  • Structured output and guardrails
  • The AI FLX Threshold Advisor
  • Related
• AI Routines & Automation
  • AI Routines
  • AI Agents automation
  • Natural-language FLX tracker generation
• Governance
  • Auditing AI activity
  • AI Compliance, Privacy and Data Governance

License & support:

License, terms & conditions, support

• EULA License
• Terms & Conditions
• Support

Compatibility and download:

Compatibility & Download

• Compatibility
• Download

Requirements:

Requirements

• Requirements for TrackMe

Installation:

Installation

• Installation of TrackMe
• Upgrading TrackMe
• Migrating and Cloning TrackMe
• License registration

Product guide:

Product guide

• Introduction
  • What is TrackMe?
  • Core concepts and vocabulary
  • How TrackMe works
  • Navigating the TrackMe UI — in depth
• Virtual Tenants & Access
  • Virtual Tenants explained
  • Creating a tenant
  • Managing tenants
  • Virtual Groups
  • Roles & access control
  • Roles & access control — in depth
  • Personal preferences
• Monitoring Components
  • The six components at a glance
  • DSM — Data Source Monitoring
  • DHM — Data Host Monitoring
  • Feeds thresholds (delay & latency)
  • Expected sources & hosts — in depth
  • MHM — Metric Host Monitoring
  • FLX — Flex Objects
  • Flex Object trackers — in depth
  • FQM — Field Quality Monitoring
  • WLK — Workload Knowledge
  • Workload monitoring — in depth
  • Hybrid trackers
  • Hybrid trackers — in depth
  • Replica trackers
• Entity State & Scoring
  • The entity state machine
  • Impact scoring & thresholds
  • Status flapping
• Classification & Protection
  • Priority
  • Priority — in depth
  • Tags
  • Tags — in depth
  • Labels & auto-labels
  • SLA policies
  • Logical groups
  • Disruption queue
  • Notes
• Alerting
  • Stateful alerting
  • Notable events
  • Acknowledgments
  • Alerting & third-party integration — in depth
• Topology Studio
  • Overview
  • End-to-end example — monitoring a production Web platform
  • Authoring topologies
  • Topology Alerts
  • AI integration
  • Administration
• Machine Learning
  • Outlier detection
  • Incremental baseline training
  • Outlier detection — in depth
• Integrations & Remote Deployments
  • Remote Splunk deployments
  • Remote deployments — in depth
  • CMDB integration
  • Lookup monitoring
  • Lookups monitoring — in depth
  • Splunk SOAR
  • SOAR monitoring — in depth
  • TrackMe App on SOAR
  • TrackMe App on SOAR — in depth
  • Cribl monitoring
  • Elastic sources
  • Elastic sources — in depth
• Operations & Administration
  • Configuration
  • Configuration — in depth
  • Large-scale environments
  • Large-scale environments — in depth
  • Maintenance mode
  • Bank holidays
  • Data sampling
  • Data sampling — in depth
  • Backup & restore
  • Configuration Guardian
  • Configuration Manager (CI/CD)
  • CI/CD & config manager — in depth
  • Support diagnostics
  • REST API reference
  • Events & sourcetypes
  • Metrics reference

White papers:

White papers

• TrackMe’s White Papers
• Running a TrackMe Proof of Concept
  • Identifying the Key Use Cases
  • Identify where to deploy TrackMe
  • Service account and permissions
  • Roles Based Access Control (RBAC)
  • Install TrackMe
  • Register a TrackMe licence for the POC
  • Remote deployment and multiple Search Head tiers
  • Design TrackMe tenants
  • Design TrackMe at scale
  • Design your alerting strategy
• Splunk infrastructure monitoring
  • Tracking Splunk Cloud SVC consumption in TrackMe
  • Monitor Splunk Workload with TrackMe’s Workload component
  • Monitor Splunk Indexer Clusters
  • Monitor Splunk Search Head Clusters
• Detection & alerting use cases
  • Use TrackMe to detect abnormal events count drop in Splunk feeds
  • Analyse log messages logging level to detect behaviour anomalies using TrackMe’s Flex Object and Machine Learning Anomaly Detection
  • Using SLA alerting to build a 2-tier monitoring system
• Operations & administration
  • Backing up and Restoring TrackMe
  • Auto deletion or management of TrackMe entities
  • Performing mass operations in TrackMe

Troubleshoot & FAQ:

Troubleshoot

• Troubleshooting TrackMe
• Frequently asked questions (FAQ)

Versioning and build history:

Versioning

• Release notes

Third party integrations:

Third party integrations

• Palo Alto XSOAR Integration
• Cribl Stream & Edge API

Various

Various

• Third-party components credits

Archives

Archives

• Migrate from TrackMe V1 to TrackMe V2