topic monitor inode useage in Monitoring Splunk

monitor inode useage

Vinesh93 — Mon, 08 Jun 2020 23:46:44 GMT

Is there any possible solution to monitor the inode usage of linux system in Splunk?

Re: monitor inode useage

PavelP — Thu, 26 Mar 2020 07:03:02 GMT

you need to install an Add-on for Linux and modify/copy its df.sh script, change

CMD='df -TPh'

CMD='df -TPhi'

you can remove -h parameter too.

Output will be:

Filesystem   Type              Size        Used       Avail      UsePct    MountedOn
/dev/sda1   ext4               57G         19G         35G         36%    /

and without -h:

Filesystem    Type              Size        Used       Avail      UsePct    MountedOn
/dev/sda1    ext4           7627488      104349     7523139          2%    /

you can modify the FORMAT and HEADER variables in df.sh further to show Inodes/IUsed/IFree/IUse% instead of Size/Used/Avail/UsePct

Re: monitor inode useage

Vinesh93 — Thu, 26 Mar 2020 11:20:14 GMT

@PavelP Thanks a lot, that works like a charm!!!

Re: monitor inode useage

PavelP — Thu, 26 Mar 2020 11:44:30 GMT

thank you @Vinesh93 , please accept the answer as solution so everybody can benefit from it