Skip to content

Commit

Permalink
docs: update dashboard.md (#2500)
Browse files Browse the repository at this point in the history
  • Loading branch information
jenworthington authored Jun 27, 2024
1 parent 445a043 commit 3a7ab6d
Showing 1 changed file with 11 additions and 12 deletions.
23 changes: 11 additions & 12 deletions docs/dashboard.md
Original file line number Diff line number Diff line change
@@ -1,36 +1,35 @@
# SC4S Metrics and Events Dashboard
The SC4S Metrics and Events Dashboard lets you monitor crucial metrics and event flows for all the SC4S instances sending data to a chosen Splunk platform.
The SC4S Metrics and Events dashboard lets you monitor metrics and event flows for all SC4S instances sending data to a chosen Splunk platform.


## Functionalities

### Overview metrics
![Overview metrics](dashboard_overview_metrics.png)
The dashboard displays the cumulative sum of received and dropped messages for all SC4S instances in a chosen interval and for the specified time range. By default the interval is set to 30 seconds and the time range is 15 minutes.
The SC4S and Metrics Overview dashboard displays the cumulative sum of received and dropped messages for all SC4S instances in a chosen interval for the specified time range. By default the interval is set to 30 seconds and the time range is set to 15 minutes.

The Received Messages panel can be used as a heartbeat metric. A healthy SC4S instance should send at least one message per 30 seconds. This metrics message is included in the count.

The Dropped Messages panel should remain at a constant level of 0. If SC4S drops messages due to filters, slow performance, or for any other reason, the number of dropped messages will persist until the instance restarts. This panel does not include potential UDP messages dropped from the port buffer, which SC4S is not able to track.
Keep the Dropped Messages panel at a constant level of 0. If SC4S drops messages due to filters, slow performance, or for any other reason, the number of dropped messages will persist until the instance restarts. The Dropped Messages panel does not include potential UDP messages dropped from the port buffer, which SC4S is not able to track.

### Single instance metrics
![Single instance metrics](dashboard_single_instance_metrics.png)
You can display the instance name and SC4S version for a chosen SC4S instance.
SC4S is available in versions greater than or equal to 3.16.0.
You can display the instance name and SC4S version for a specific SC4S instance (available in versions 3.16.0 and later).

The dashboard also displays a timechart of deltas for received, queued, and dropped messages for a chosen SC4S instance.
This dashboard also displays a timechart of deltas for received, queued, and dropped messages for a specific SC4S instance.

### Single instance events
![Single instance events](dashboard_single_instance_events.png)
The dashboard helps to analyze traffic processed by an SC4S instance by visualizing the following events data:
You can analyze traffic processed by an SC4S instance by visualizing the following events data:

- total number of events
- distributions of events by index
- trends of events by index
- data parsers in use
- applied tags

## Installation
1. In Splunk platform open `Search` -> `Dashboards`.
2. Click on `Create New Dashboard` and make an empty dashboard. Be sure to choose `Classic Dashboards`.
3. In the `Edit Dashboard` view go to `Source` and replace the initial xml with the contents of [dashboard/dashboard.xml](https://github.com/splunk/splunk-connect-for-syslog/blob/main/dashboard/dashboard.xml) published in the SC4S repository.
4. After saving the changes your dashboard will be ready to use.
## Install the dashboard
1. In Splunk platform open **Search** -> **Dashboards**.
2. Click on **Create New Dashboard** and make an empty dashboard. Be sure to choose **Classic Dashboards**.
3. In the "Edit Dashboard" view, go to **Source** and replace the initial xml with the contents of [dashboard/dashboard.xml](https://github.com/splunk/splunk-connect-for-syslog/blob/main/dashboard/dashboard.xml) published in the SC4S repository.
4. Saving your changes. Your dashboard is ready to use.

0 comments on commit 3a7ab6d

Please sign in to comment.