Infrastructure data
Infrastructure data refers to information related to the systems, resources, and configurations that support the operation, deployment, and maintenance of software applications and services. Tools like infrastructure-as-code (IaC) generate infrastructure data that supports automated deployments and updates. This data is typically associated with the underlying hardware, networks, software platforms, and cloud services that form the foundation for running and managing software systems.
Infrastructure data is critical for ensuring the proper functioning, monitoring, and optimization of IT environments and can include metrics, logs, configurations, and state information. It is often collected in real-time to detect and resolve issues promptly. As infrastructure scales (for example, in cloud environments), the volume of infrastructure data also increases.
Infrastructure data might include sensitive information, so it must be handled according to best practices for data security and regulatory compliance.
Infrastructure data typically includes:
- Server infrastructure data: CPU usage, memory usage, disk space, and server uptime
- Cloud infrastructure data: Instance metadata, resource utilization, scaling events, and cost and billing data
- Container and orchestration data: Container status, cluster nodes, pod metrics, and deployment configurations
- Monitoring and observability data: System logs, application performance metrics, health checks, and alert data
- Configuration and infrastructure as code (IaC) data: Configuration files, environment variables, DNS records, and load balancer settings
The Splunk Common Information Model (CIM) add-on contains a Performance data model with fields and tags that describe performance tracking data, similar to what is described in this article. This includes CPU, memory, storage, uptime and more. You might also be interested in storage data and network infrastructure data.
Add-ons and apps
- Linux/Unix
- Microsoft
- Oracle
- Splunk Add-on for Sysmon
- Splunk Add-on for Google Cloud Platform
- Qualys Technology Add-on (TA) for Splunk
- Docker
- Kubernetes Connector
Use cases for the Splunk platform
- Maintaining *nix systems with the Splunk platform
- Maintaining Microsoft Windows systems with the Splunk platform
- Benchmarking filesystem performance on Linux-based indexers
- Automating Splunk platform administration with a Continuous Configuration Automation framework
- Improving hardware utilization by moving indexers into Kubernetes