TrackMe’s White Papers

About TrackMe’s white papers

• TrackMe is a powerful, flexible and large solution that can be used to monitor Splunk environments, from feeds tracking to the search Workload, Performance and infrastructure tracking, functional controls and more!

• With these white papers, tutorials and documentations, we aim at providing and sharing deep knowledge around our most valuable practices and use cases.

• This collection of articles will only get better by the time!

TrackMe implementation

• Running a TrackMe Proof of Concept

For TrackMe beginners!

• QUICK START - Starting with TrackMe: (feed tracking quickstart)

Feeds Tracking: monitoring Splunk Data availability and quality

• Use TrackMe to detect abnormal events count drop in Splunk feeds

Workload Tracking: monitoring and tracking the activity and behaviour of Splunk scheduled searches

• Monitor Splunk Workload with TrackMe’s Workload component

Infrastructure Monitoring: monitoring and tracking Splunk components and infrastructure

• Monitor Splunk Indexers Clusters

• Monitor Splunk Search Head Clusters

• Analyse log messages logging level to detect behaviour anomalies using TrackMe’s Flex Object and Machine Learning Anomaly Detection

Splunk Cloud specific

• Tracking Splunk Cloud SVC consumption in TrackMe

Alerting and Notifications: implementing and design your alerting and notification strategy

• Using SLA alerting to build a 2-tier monitoring system

TrackMe management

• Backing up and Restoring TrackMe

• Performing mass operations in TrackMe

• Auto deletion or management of TrackMe entities