Discover TrackMe

Author live topology maps from real TrackMe entities — place, connect, share, and watch them update in real time. Views nest inside views, integrity checks keep every map honest, and state-aware Topology Alerts notify the moment the picture degrades.

Describe a monitoring task in plain English and TrackMe watches for it on a schedule — reasoning over your live environment, judging whether it truly matters, then notifying you or acting under your explicit consent.

A fleet of AI advisors that inspect your monitored estate, propose grounded configuration changes, and — with your explicit consent — apply them through the same REST API an administrator would use.

Watch accounts, scheduled searches, resource consumption and privileged access from the audit trail Splunk already keeps. 16 built-in policies raise findings with evidence in plain words — one decision per account, zero infrastructure.

Discover and watch every HTTP Event Collector endpoint, pool and token from telemetry Splunk already writes — availability, refusals, back pressure, balance, token silence and ML traffic outliers, with nothing installed and zero change on senders.

A dedicated tenant follows one Cribl Stream deployment end to end — Leader, Worker Groups, Workers, and every Source, Destination, Pipeline and Route — with a traffic ML model on every data object and nothing installed on Cribl.

Follow the Fleets of a Cribl Edge Leader: connectivity, version and configuration drift, Source and Destination health, and the disk, CPU and memory of every Edge Node — whether you run 17 nodes or tens of thousands.

A modular framework that proactively detects misconfigurations and must-know conditions across your TrackMe deployment — and turns them into actionable, self-healing alerts you can snooze, tune, act on, and be emailed about.

Context-aware AI that investigates entity health, provides operational guidance, and generates intelligent status reports in alert emails.

Monitor your Splunk data sources availability, quality, and latency. Detect anomalies with Machine Learning Outliers and ensure data integrity.

Transform any Splunk search into fully tracked, monitored entities. 60+ pre-built templates across 8 categories with custom KPIs.

Track and monitor the health of your scheduled activity in Splunk, detecting anomalies and performance issues locally or remotely.

Continuously assess fields quality for CIM and non-CIM data contexts. Monitor parsing accuracy and maintain data dictionary standards.

Create dedicated monitoring spaces with Role-Based Access Control. Isolate teams, geographies, and data types within a single deployment.

Intelligent incident lifecycle management with state-aware alerts, rich HTML emails with embedded charts, and AI-generated status reports.

Flexible scoring system replacing hardcoded rules, combined with ML-driven anomaly detection learning seasonal patterns automatically.

From a single TrackMe instance, transparently and securely monitor any number of remote Splunk deployments as if data were local.

Comprehensive API endpoints for integration, automation, entity management, and programmatic access to all TrackMe capabilities.

Smartly handle maintenance periods with automated alert silencing, build a maintenance knowledge database for SLA calculations, and manage bank holidays with imports for 40+ countries.

Built-in automated backup of KVstore records and Knowledge Objects, with flexible full or partial restore operations — per tenant, per collection, or per object — plus seamless export, import, and transparent Search Head Cluster support.

Full dark and light theme support with user-level preferences for color scheme, auto-refresh, tenant card detail level, and fully customizable table views.

Build your own Cribl monitoring on your own SPL: twelve ready-made Flex Object use cases over Cribl’s internal metrics, arranged into a living map in Topology Studio — the custom companion to the dedicated Cribl Stream and Cribl Edge tenants.

Pre-built SOAR monitoring use cases with bi-directional REST API integration, active asset health checks, and automation broker high-availability failover.