fschange not working in high load setups

strive — Sun, 23 Jun 2013 12:51:54 GMT

Hi,

We have two kinds of setups. One setup for development where we inject ~2-5 GB data per day. Another one is for performance testing, where we inject ~75-100GB per day.

We have set fschange to $SPLUNK_HOME/etc/dep-apps directory. We have all our apps under this directory.

The pollPeriod is set to 180.

In our development setup fschange works fine. When something changes, the deployment server reloads and changes are pushed to other nodes.
Where as in performance testing setup it is not working.

What could be the reason? Is there any fix.

This is all we have in our inputs.conf for fschange.

[fschange:$SPLUNK_HOME/etc/dep-apps]
pollPeriod = 180

We are using splunk 4.3.1

Thanks

Strive

Re: fschange not working in high load setups

miteshvohra — Sun, 23 Jun 2013 13:29:04 GMT

Which version of Splunk are you using? According to the online documentation and release notes, 'fschange' monitor is deprecated in version 5.x.

HTH, Mitesh.

Re: fschange not working in high load setups

strive — Sun, 23 Jun 2013 13:36:52 GMT

We are using 4.3.1

topic Re: fschange not working in high load setups in Getting Data In

fschange not working in high load setups

Re: fschange not working in high load setups

Re: fschange not working in high load setups