MetaDefender File Security App for Splunk

Track the performance and security posture of the MetaDefender ICAP Server using a time-based selector. This application offers insights into CPU, memory, and disk usage, enabling effective resource management and system health monitoring. - Performance metrics - CPU & Memory Usage: Monitor utilization trends over time to detect performance bottlenecks or abnormal behavior. -Disk Space: View disk usage patterns to avoid storage-related interruptions. - Request status - Processed vs Blocked Requests: Visualize request outcomes, identifying how many were blocked due to threats or policy violations. - Top ICAP Clients: Identify which IP addresses are generating the most traffic—what’s allowed vs. blocked. - Request Status by Client: Analyze how different clients are interacting with the ICAP server—what’s allowed vs. blocked. - Scan server insights - File Scan Results: See how many files were successfully scanned or failed across different scan servers. Additionally, gain clarity on scanning performance by scan server workflow for fine tuning optimization.