topic Re: Splunk implements Graphite? in Dashboards & Visualizations

Splunk implements Graphite?

tpaulsen — Wed, 20 Mar 2013 17:05:09 GMT

Has someone ever tried to implements Graphs or at least data from Graphite into a Splunk Dashboard? How can we do that? We would like to compare a Splunk timechart with a Graphite Graph on the same Dashboard. And we don´t want to import the data from graphite into Splunk, just use Splunk as a Dashboard.

Many thanks, Thomas

Re: Splunk implements Graphite?

halr9000 — Fri, 13 Dec 2013 16:29:37 GMT

You could do this with the Splunk 6 web framework. Create a dashboard, convert it to HTML, and then do whatever you want to in the HTML to integrate your Graphite stuff. I don't have any experience with Graphite to explain that part.

And if you do want to take data that you are already sending to Carbon/Graphite, but send it to Splunk instead, it's trivial to read the same data format in Splunk. I wrote a blog post on the topic which explains the steps, which you'll see are pretty simple.

Re: Splunk implements Graphite?

ampledata — Tue, 15 Apr 2014 23:30:55 GMT

Here's an app for getting Splunk data back out into Graphite: https://github.com/OnBeep/splunk_graphite

Re: Splunk implements Graphite?

bbhandari012 — Tue, 15 Mar 2016 01:50:02 GMT

I installed collectd on the client machine which already has the splunk forwarder running on it.
LoadPlugin write_graphite

Host "52.32.76.219"  #indexer ip
Port 10001
 Protocol "tcp"
 LogSendErrors true
 Prefix "collectd"
 Postfix "collectd"

and on the indexer, i allowed the port 10001.
/opt/splunk/bin/splunk enable listen 10001 -auth admin:*******
But i am not getting the results from the client machine. Also, client shows the following error
collectd[21107]: write_graphite plugin: send to 52.32.76.219:10001 (tcp) failed with status -1 (Broken pipe).

Re: Splunk implements Graphite?

groland — Wed, 23 Mar 2016 10:40:37 GMT

Another really good app for this: https://splunkbase.splunk.com/app/2664/