Skip to main content

 

Splunk Lantern

Infrastructure data

 

Infrastructure data refers to information related to the systems, resources, and configurations that support the operation, deployment, and maintenance of software applications and services. Tools like infrastructure-as-code (IaC) generate infrastructure data that supports automated deployments and updates. This data is typically associated with the underlying hardware, networks, software platforms, and cloud services that form the foundation for running and managing software systems.

Infrastructure data is critical for ensuring the proper functioning, monitoring, and optimization of IT environments and can include metrics, logs, configurations, and state information. It is often collected in real-time to detect and resolve issues promptly. As infrastructure scales (for example, in cloud environments), the volume of infrastructure data also increases.

Infrastructure data might include sensitive information, so it must be handled according to best practices for data security and regulatory compliance.

Infrastructure data typically includes:

  • Server infrastructure data: CPU usage, memory usage, disk space, and server uptime
  • Cloud infrastructure data: Instance metadata, resource utilization, scaling events, and cost and billing data
  • Container and orchestration data: Container status, cluster nodes, pod metrics, and deployment configurations
  • Monitoring and observability data: System logs, application performance metrics, health checks, and alert data
  • Configuration and infrastructure as code (IaC) data: Configuration files, environment variables, DNS records, and load balancer settings

The Splunk Common Information Model (CIM) add-on contains a Performance data model with fields and tags that describe performance tracking data, similar to what is described in this article. This includes CPU, memory, storage, uptime and more. You might also be interested in storage data and network infrastructure data.

Before looking at documentation for specific data sources, review the Splunk Docs information on general data ingestion: 

Use cases for Splunk observability products