topic Re: Inconsistent data injestion Lansweeper in Splunk Cloud Platform

Inconsistent data injestion Lansweeper

PolarBear01 — Wed, 18 Dec 2024 08:31:22 GMT

Hi everyone,

I've recently integrated Lansweeper (cloud) data into my Splunk Cloud instance, but over the past few days, I've been encountering some ingestion issues.

I used the add-on: https://splunkbase.splunk.com/app/5418

Specifically, the data source intermittently stops sending data to Splunk without any clear pattern. Here's what I've checked so far:

My configuration seems fine, and the polling interval is set to 300 seconds.
The ingestion behavior appears inconsistent, as seen in the attached image. Based on the type of data Lansweeper generates, I wouldn't expect this inconsistency.
While double-checking my configuration, I noticed an error, yet the source still manages to ingest data sporadically at certain hours.

Has anyone experienced similar issues or could provide guidance on how to debug this further?

Thanks in advance for your help!

Re: Inconsistent data injestion Lansweeper

inventsekar — Wed, 18 Dec 2024 13:08:39 GMT

Hi @PolarBear01 i am not sure how to help on this, but thought to ask you:

1) did you enter only one site or multiple sites?

2) as shown on that error text, may i know, if had a chance to check the python.log for more details

Re: Inconsistent data injestion Lansweeper

PolarBear01 — Wed, 18 Dec 2024 14:31:22 GMT

Hi @inventsekar, thanks for the reply,

I just entered one site. On the other hand I would be pleased to share the error logs but none are showing.
I configured logging level on the app as "ERROR" and "DEBUG" but no logs appear when I run:
index=_internal source="/opt/splunk/var/log/splunk/python.log" level!=INFO

Regards,