Get a summary of your deployment's most important metrics using the Cloud Monitoring Console (CMC) Overview (preview) dashboard.
In CMC version 3.25.0, Splunk reimagined the Overview dashboard. Navigate to Cloud Monitoring Console > Overview and select the Overview dashboard link in the banner to view the new dashboard.
Preview features are provided by Splunk to you "as is" without any warranties, maintenance and support, or service level commitments. Splunk makes this preview feature available in its sole discretion and may discontinue it at any time. Use of preview features is subject to the Splunk General Terms.
Do not modify this dashboard. Changing any of the search criteria, formatting, or layouts might cause inaccurate results and also override the automatic update process. You can use the '''Personalize''' feature to select which metrics to display.
Review the Overview (preview) dashboard
In the Overview (preview) dashboard in CMC version 3.25.0, you can prioritize metrics and personalize your experience by choosing which license entitlement and status metrics to display.
Here's how to use the dashboard:
- Quickly understand your usage levels with the status indicators displayed in each license entitlement metric.
- To refresh or open any of the metrics in the Search and Reporting app, select one of the ellipses menus.
- You can select Personalize to choose which metric panels to display and prioritize your top metrics. Your selection applies to your own view. Other dashboard users can make their own selections.
See the following table to learn about each metric that you can select from in the Overview (preview) dashboard:
| Panel | Description |
|---|---|
Overall · Peak SVC Usage (Displayed by default and applicable if your deployment has this entitlement) | Shows your organization's overall peak SVC usage as a single value and a percentage of your license entitlement. Overall peak SVC usage refers to the highest amount of resources used in a given time interval to perform system processes such as indexing, any running search processes, and shared services. It primarily measures the CPU usage across search and indexing workloads. |
Ingest (Displayed by default and applicable if your deployment has this entitlement) | Shows ingest license entitlement and usage data if the deployment has an ingest-based subscription. This panel accesses the Ingest dashboard. |
Search count (Displayed by default) | The large number shows the number of searches performed during the previous day. For example, if you access the dashboard on June 8, this panel shows data from June 7, 12:00 AM to 11:59 PM. The smaller number and arrow indicates the increase or decrease in searches from the previous search count.
|
Total ingest volume (Displayed by default) | The large number shows the amount of data ingested in GB in the previous day. The smaller number and arrow indicates the increase or decrease in data ingestion from the previous ingestion total. This panel accesses the Ingest dashboard. |
| Missing forwarders (Displayed by default) | A forwarder shows a status of missing if it hasn't connected to indexers within 15 minutes of its last successful connection. This panel accesses the Forwarders: Deployment dashboard. |
Searchable storage (DDAS) (Displayed by default and applicable if your deployment has this entitlement) | Shows deployment's searchable storage entitlement based on DDAS license and amount of searchable storage used by customer and metered internal indexes This panel accesses the Searchable storage (DDAS) dashboard. |
Archive storage summary (DDAA) (Displayed by default and applicable if your deployment has this entitlement) | Shows deployment's archive storage entitlement based on DDAA license and amount of archive storage used by customer and metered internal indexes. This panel accesses the Archive storage (DDAA) dashboard. |
Federated search for Amazon S3 (Displayed by default and applicable if your deployment has this entitlement) | Shows amount of data scanning capabilities and percentage of data scanning capabilities utilized by searches during current license term. Federated Search for Amazon S3 dashboard. |
| Total indexes | Shows a snapshot of the currently active indexes that contain events. This panel accesses the Indexing performance dashboard. You must have the indexes_edit capability to view accurate data in this panel. Average daily users (last 7 days) |
| Indexes with events | Shows the number of indexes that have processed events.
You must have the indexes_edit capability to view accurate data in this panel. |
| Data parsing issues | Shows a single value of the line breaking, timestamp parsing, and aggregation issues the Splunk platform encountered when parsing your data for indexing. This panel accesses the Data quality dashboard. |
| Splunk TCP port closures | Shows the percentage of your activeindexers in the last 4 hours that have Splunk TCP port closures. For example, if you access the dashboard at 4:00 PM, this panel shows data from 12:00-4:00 PM. This panel accesses the Indexing performance dashboard. |
Scheduled skipped searches | Shows the percentage of your scheduled searches that encountered an issue and had to be skipped in the last hour. This panel accesses the Skipped scheduled searches dashboard. |
| Long running searches | Shows the number of ad hoc searchesin the last 4 hours that have taken more than 30 minutes to complete. This panel accesses the Search Usage Statistics dashboard. |
Interpret these results
Because the Overview (preview) dashboard provides a high-level view of the overall health of your deployment, investigate any anomalous spikes or dips and take the necessary mitigation action. For example, if you see a sudden increase in skipped scheduled searches, audit these searches to determine the cause and correct any issues.
See Use the Health dashboard to investigate further and learn more about the overall health of your deployment and its data collection, indexing, and search performance.
