Resolve error: Splunk_TA_nix awk: record `HARD_DRIVES ssd2262 ...' too long?

maharshidave — Tue, 17 Jan 2023 16:00:02 GMT

Hi Team,

Using Splunk_TA_nix addon Version 8.4. While running below three scripts getting below Errors. Customer is using Solaris 10 OS.

Splunk_TA_nix/bin/vmstat_metric.sh" awk: record `HARD_DRIVES ssd2262 ...' too long
Splunk_TA_nix/bin/vmstat.sh" awk: record `HARD_DRIVES ssd1038 ...' too long
Splunk_TA_nix/bin/hardware.sh" awk: record `HARD_DRIVES ssd1038 ...' too long

upgraded Addon to the latest version 8.5, but after that below issue has been started and no data was ingested.

Splunk_TA_nix/bin/uptime.sh: $(dirname /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/uptime.sh)/common.sh: not found
Splunk_TA_nix/bin/cpu_metric.sh: $(dirname /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/cpu_metric.sh)/common.sh: not found

So to solve, rollback Addon to version 8.4 but again awk: record `HARD_DRIVES ssd1038 error started.
Can anyone help to solve this issue.

Re: Splunk_TA_nix awk: record `HARD_DRIVES ssd2262 ...' too long

akriti — Mon, 16 Jan 2023 20:43:18 GMT

Hi @maharshidave . Were you able to resolve this issue? I'm getting the same error as you got after upgrading to 8.5.

Please share your solution if you were able to resolve it.

Thanks!

topic Re: Splunk_TA_nix awk: record `HARD_DRIVES ssd2262 ...' too long in Getting Data In

Resolve error: Splunk_TA_nix awk: record `HARD_DRIVES ssd2262 ...' too long?

Re: Splunk_TA_nix awk: record `HARD_DRIVES ssd2262 ...' too long