Our app allows users to use InsightFinder predictive analytics services to extract insights from all kinds of data (e.g., metrics, logs) collected by Splunk. InsightFinder provides predictive analytics services such as multivariate anomaly detection, automatic root cause analysis, and long-term/medium-term/short-term resource usage forecast based on cutting-edge unsupervised statistical machine learning and signal processing technologies. Our product has been tested in some of the most challenging environments, from world largest IT companies, Fortune 50 financial institutions, major telecommunications carriers, and some of the largest healthcare institutions in the world. As an example, one of our multi-variate anomaly detection algorithms has been licensed by Google. So join the companies that are already improving their uptime and MTTR with the help of InsightFinder!
Sign in InsightFinder web site with your user credentials
Go to "Register Project" and register a new project under the Insight Agent tab (we'll refer to this project name as INSIGHTFINDER_PROJECTNAME).
Give a project name, and select Private Cloud for project type
Go to Account Info by clicking on your user id at the top right corner of the webpage, and note the license key number.
Retrieve the installation file by download app from Splunk Base.
Unpack the contents into
After unpacking, you should see the directory in:
We’ll refer to this directory as $INSIGHTFINDER_HOME in future instructions.
The files insightfindersettings.json and fetchifdatasettings.json must be configured properly to your InsightFinder account before queries can be added.
- Create the folders: $INSIGHTFINDER_HOME/local and $INSIGHTFINDER_HOME/lookups/INSIGHTFINDER_PROJECTNAME
- Copy over the files using the commands:
cp example_configs/insightfindersettings.json.example lookups/INSIGHTFINDER_PROJECTNAME/insightfindersettings.json
cp example_configs/fetchifdatasettings.json.example lookups/INSIGHTFINDER_PROJECTNAME/fetchifdatasettings.json
- Open insightfindersettings.json and set
app_name to their proper values
- Open fetchifdatasettings.json and change projectName and host to your desired project name.
- Reference the comment block instructions as needed. Make sure to delete the comment block when finished.
Each search needs its own folder, and a file to specify which fields to monitor and the data to send to InsightFinder. For instance, let's give our search a name: "ResourceMetrics".
- Create the folder $INSIGHTFINDER_HOME/lookups/INSIGHTFINDER_PROJECTNAME/ResourceMetrics
- Move a copy of monitored_fields.json into your new search folder with the command
cp $INSIGHTFINDER_HOME/example_configs/monitored_fields.json.example $INSIGHTFINDER_HOME/lookups/INSIGHTFINDER_PROJECTNAME/ResourceMetrics/monitored_fields.json
- Open the file and set the fields, referencing the comment block instructions as needed. Make sure to delete the comment block when finished.
host="splunkdemo" index="resource_metrics" | sendtoif -p INSIGHTFINDER_PROJECTNAME -s ResourceMetrics
*/1 * * * *for Cron Expression.
Create a simple visualization of the InsightFinder results using a Splunk line chart.
- Navigate to your InsightFinder page in Splunk.
- To the right of the page, click Edit -> Edit Panels.
- Click Add Panel->New->Line Chart and enter the name of your metric in Content Title.
- For simple verification purposes, view the data from the past 24 hours. Select All Time-> Last 24 hours.
- For Search String, enter the same query as before with the addition of
-p "PROJECT NAME"
- To preview results as a list, click Run. To view the line chart, click Add to Dashboard at the top of the page.
Updated scripts sending data to and fetching data from InsightFinder server.
March 17, 2017, 3:01 p.m.
Nov. 13, 2016, 5:49 a.m.
Aug. 25, 2016, 3:50 a.m.
Splunk's App Certification program uses a specific set of criteria to evaluate the level of quality, usability and security your app offers to its users. In addition, we evaluate the documentation and support you offer to your app's users.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 50GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.