TrackMe for Splunk

Author live topology maps from the entities TrackMe already monitors: place, connect, group with auto-populating aggregates, stack live KPIs on every node — then let state-aware Topology Alerts watch the whole picture and call you the moment it degrades, with the rendered map embedded in the email.

A fleet of AI advisors that inspect your monitored estate, propose grounded changes, and — with your consent — apply them through the same REST API a UI click would invoke. Six specialists plus a catalog-driven Concierge, launched from chat with a one-click consent card.

Three dedicated components to monitor and track your data sources' availability, quality, and latency. Detect anomalies with Machine Learning Outliers and ensure data quality through format recognition.

Track scheduled search activity, SLA compliance, and execution metrics across your Splunk environment. Monitor run times, detect failures, and ensure your critical saved searches and reports run on schedule.

Intelligent incident lifecycle management with state-aware alerts that track opening, updating, and closing. Rich HTML email notifications with embedded charts and AI-generated status reports.

Replace hardcoded alert rules with a flexible scoring system. Combined with ML-driven anomaly detection that automatically learns seasonal patterns with confidence-based evaluation.

A comprehensive REST API with an interactive explorer interface for integration and automation. Interact with every TrackMe capability programmatically or directly in native SPL through the built-in trackme command.

Automated daily backups of all KVstore records and Knowledge Objects with flexible full or partial restore operations — per tenant, per collection, or per object. Export and import archives for migration with transparent Search Head Cluster support.

Twelve ready-made use cases turn Cribl’s own internal metrics into monitored entities — pipelines, routes, inputs, destinations, worker hosts — with nothing installed on Cribl. Then arrange them into a living map in Topology Studio: sparklines on every node, one alert for the whole deployment, and a picture that reads itself when something degrades.