topic Re: Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu? in All Apps and Add-ons

Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu?

konstantin_zsen — Mon, 16 Nov 2015 16:05:04 GMT

Hi,

I have installed the Splunk App for Unix and Linux, enabled cpu.sh, and installed sysstat package. Also, I have added to inputs.conf (.../etc/system/local/) the following stanza:

[script://./bin/cpu.sh]
sourcetype = cpu
source = cpu
interval = 300
index = os
disabled = 0

But "CPU Used By Group" in the Splunk App for Unix shows "No Results Found".

In S.o.S I can see CPU usage.

Thank you for any help.

Re: Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu?

konstantin_zsen — Mon, 16 Nov 2015 17:02:35 GMT

cpu.sh works perfectly when I run ones manually under root.

Re: Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu?

konstantin_zsen — Tue, 17 Nov 2015 10:26:51 GMT

Follow searches returns results:
index=os sourcetype=os host=ubuntu
index=os sourcetype=top host=ubuntu

This example also return results - "index=os sourcetype=top host=ubuntu | chart avg(pctCPU) as avgCPU avg(pctMEM) as avgMEM by _time".

Splunk App for Unix does not see cpu.
I'm slightly disappointed.

Re: Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu?

konstantin_zsen — Tue, 17 Nov 2015 10:37:26 GMT

May be my problem related with permissions?

Re: Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu?

johnsplunk01 — Fri, 20 Oct 2017 22:19:16 GMT

I am having the same issue. The cpu and mem shows NONE under the Hosts Tab. Were you able to resolve this issue?

Re: Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu?

lfedak_splunk — Fri, 20 Oct 2017 22:37:56 GMT

Hey @johnsplunk01, Please use the comment button when leaving a comment! I went ahead and converted this one from an answer to a comment.

Re: Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu?

lloydknight — Sat, 21 Oct 2017 05:58:46 GMT

Have you checked the permission of the cpu.sh script? The script should be in executable permission. Also check the splunkd.log for errors.

Hope it helps!

Thanks!

Re: Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu?

johnsplunk01 — Tue, 29 Sep 2020 16:28:36 GMT

This issue is not caused by the Splunk_TA_nix addon app. I do see both cpu and mem data coming in to the splunk enterprise/monitoring instance when doing a preview in the splunk_app_for_nix settings tab.

It appears to be an issue with the splunk_app_for_nix application itself, not being able to interpret or read the incoming data for cpu and mem. The metrics tab on splunk_app_for_nix is also blank.

Re: Why does the Splunk App for Unix and Linux not show CPU usage on Ubuntu?

Amandeepsin — Sat, 11 May 2019 17:27:36 GMT

Hi,

You need to install sysstat package in linux as it doesn't come preloded with it.. Additionally, you have to make following changes in web.conf file

[settings]
minify_js = True

Restart service. It should work fine