topic Re: How to differentiate between different redis hosts using Redis Add-on for Splunk? in All Apps and Add-ons

How to differentiate between different redis hosts using Redis Add-on for Splunk?

sk314 — Wed, 08 Nov 2017 21:27:08 GMT

I am trying to pull logs from three redis servers. I have them configured as separate inputs. However, I am unable to differentiate the logs using any metadata or field. I am sure I am missing something trivial. Would anyone shed some light on this?

Re: How to differentiate between different redis hosts using Redis Add-on for Splunk?

xavierashe — Wed, 08 Nov 2017 21:56:38 GMT

If they are coming from different servers, then the field you would use to differentiate is 'host'.

Re: How to differentiate between different redis hosts using Redis Add-on for Splunk?

sk314 — Wed, 08 Nov 2017 21:59:42 GMT

These are modular inputs configured on a data collector that has the add-on installed. The host field is populated by the hostname of the data collector instance.

Re: How to differentiate between different redis hosts using Redis Add-on for Splunk?

xavierashe — Wed, 08 Nov 2017 22:07:33 GMT

Ah, that makes sense. Can you post your inputs.conf from $Splunk_Home/apps/TA-splunk-addon-for-redis-server/local?

Re: How to differentiate between different redis hosts using Redis Add-on for Splunk?

sk314 — Wed, 08 Nov 2017 22:10:12 GMT

[redis://www_cs01]
authentication = password
index = www
interval = 60
password = ********
redis_host = wwwcs01
redis_port = 6379

[redis://www_cs02]
authentication = password
index = www
interval = 60
password = ********
redis_host = wwwcs02
redis_port = 6379

[redis://www_cs03]
authentication = password
index = www
interval = 60
password = ********
redis_host = wwwcs03
redis_port = 6379

Re: How to differentiate between different redis hosts using Redis Add-on for Splunk?

sk314 — Wed, 08 Nov 2017 22:11:09 GMT

Not sure if I can add a host= entry in these mod inputs.

Re: How to differentiate between different redis hosts using Redis Add-on for Splunk?

xavierashe — Wed, 08 Nov 2017 23:00:11 GMT

Give it a try and see if it works. I have the GitHub TA and it was built in the same way as this Redis. I have the host entry there and it works.

Re: How to differentiate between different redis hosts using Redis Add-on for Splunk?

sk314 — Thu, 09 Nov 2017 22:31:02 GMT

That worked! I knew it was going to be a trivial thing. I do wish the inputs automatically added either the redis_host field or made a host=field by itself. Thanks.

Re: How to differentiate between different redis hosts using Redis Add-on for Splunk?

xavierashe — Thu, 09 Nov 2017 22:35:34 GMT

For any input, including modinputs you can add a host field to the inputs.conf like so. The inputs.conf is in the $Splunk_Home/apps/TA-splunk-addon-for-redis-server/local directory.

 [redis://www_cs01]
 authentication = password
 index = www
 interval = 60
 password = ********
 redis_host = wwwcs01
 redis_port = 6379
 host=wwwcs01

 [redis://www_cs02]
 authentication = password
 index = www
 interval = 60
 password = ********
 redis_host = wwwcs02
 redis_port = 6379
 host = wwwcs02

 [redis://www_cs03]
 authentication = password
 index = www
 interval = 60
 password = ********
 redis_host = wwwcs03
 redis_port = 6379
 host=wwwcs03

Re: How to differentiate between different redis hosts using Redis Add-on for Splunk?

svasani_splunk — Thu, 21 Dec 2017 22:18:25 GMT

I've updated the add-on to v1.0.3 to add the host.