On Thu, 15 Apr 2010, Christopher L. Butler wrote: > There are a lot of pre-existing searches that will allow for network > monitoring with Splunk. > Considering Matt's original email talking about monitoring additional > applications (Custom apps?), Splunk just jumped to mind. > Writing searches within splunk is pretty easy (Hell, *I* can do it! :)) so > getting it to do both could be done well. > I've heard some people say it was "difficult" to set up but did not have that > experience myself. > Bueller, Bueller?
I didn't express myself as clearly as I should. I don't need to monitor for functionality and errors, I need to track performance and load. Since the application hits hundreds of threads in use on occasion, tracking that and comparing it to other stats is important. Given the nature of the application and the usage of the system, I think really fine grained, like once a minute, collection is a good idea. This means that starting and running a bunch of scripts every minute is probably not a good idea. I think a long running client is a much better idea to avoid the usual startup overhead. Thoughts? -- Matt It's not what I know that counts. It's what I can remember in time to use. _______________________________________________ Tech mailing list [email protected] http://lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
