SPLUNK METRIC INDEXES props and transforms files

michaldygaz — Tue, 29 Sep 2020 20:31:18 GMT

So i have written a script that outputs current switch ram and CPU usage and I wanted to include it to Splunk App to dynamically write it to splunks metric index.

Example output:
"1532007403","cisco.usage.processorram","","s"
"1532007409","cisco.usage.ram","","g"

Here's my inputs.conf file:
//path to script
[script://$SPLUNK_HOME/etc/apps/Collector/bin/RAM_usage.sh]
disabled = false
index = snmp
sourcetype = snmp
interval = 1

Unfortunately im getting this error in Splunk: Metric event data without metric name is invalid and would not be indexed. Ensure the input metric data is not malformed.

My question is: if anybody faced same problem and how should i solve it. Step by step solution would be appreciated.

Re: SPLUNK METRIC INDEXES props and transforms files

poete — Thu, 19 Jul 2018 17:56:40 GMT

Hello @michaldygaz,

can you please share the sourcetype?

topic SPLUNK METRIC INDEXES props and transforms files in Getting Data In

SPLUNK METRIC INDEXES props and transforms files

Re: SPLUNK METRIC INDEXES props and transforms files