topic Re: Why is the Splunk Insights for Infrastructure not showing entity and data? in Splunk ITSI

Why is the Splunk Insights for Infrastructure not showing entity and data?

s2801871r — Thu, 15 Nov 2018 13:30:55 GMT

We recently cloned a VM to a new one. Changed the references of the old host name to the new one in the following files:

/etc/collectd.conf - changed Hostname
/opt/splunkforwarder/etc/system/local/server.conf - changed Servername
/opt/splunkforwarder/etc/system/local/inputs.conf - changed host

Restarted both collectd and Splunk on the new server. Still, the entity did not show up in the Insights for Infrastructure portal. There are no errors in both /etc/collectd/collectd.log and /opt/splunkforwarder/var/log/splunkd.log files.

What else can be done to correct this issue?

Re: Why is the Splunk Insights for Infrastructure not showing entity and data?

dagarwal_splunk — Thu, 15 Nov 2018 16:41:10 GMT

Please verify token in collectd.conf for with SII "Add Data" page script.
Make sure "LoadPlugin cpu" or "Hostname" not commented out in collectd.conf. Also, check that collectd is actually running.
If still not solved, try restarting collectd again and post collectd.log here.

Re: Why is the Splunk Insights for Infrastructure not showing entity and data?

s2801871r — Fri, 16 Nov 2018 16:06:42 GMT

Yes. In addition to following the steps you outlined, I also had to restart the SII collector to see the list in the portal. Hope this helps somebody. Thanks for your help @dagarwal_splunk

Re: Why is the Splunk Insights for Infrastructure not showing entity and data?

s2801871r — Fri, 16 Nov 2018 16:08:28 GMT

In addition to following these steps, I also had to restart the Splunk collector. Then, I was able to see the entities and data in the portal. Thanks @dagarwal_splunk !