All Apps and Add-ons

After updating the Splunk App for NetApp Data ONTAP from version 2.0.3 to 2.1.0, why is there no Latency data in graphs?

nicolay_koecher
Explorer

Hello Team,

My Environment - Splunt Enterprise 6.3 Netapp Ontap 2.0.3

After updating the Splunk App for NetApp data ONTAP to version 2.1.0, there is no data in filer View AVG Latency, AGV CPU and Total IOPs Rate. Older Data is still available.

Any suggestions?

greetings NIK

0 Karma

Masa
Splunk Employee
Splunk Employee

Hi,
If you just upgraded to v2.1.0, Data Model Acceleration might not be completed in the time range.
1. In bottom left of a chart panel, please click search icon to open a search string in a search view.
2. Look for "summariesonly=true", and replace it with "summariesonly=false", then run the search if timechart is populated. If it is populated, summarized data is missing most likely.
3. You can visit Data Model settings and check progress of Data Model Acceleration
(ref: Review summary creation metrics in
http://docs.splunk.com/Documentation/Splunk/6.3.0/Knowledge/Acceleratedatamodels )

0 Karma

nicolay_koecher
Explorer

Hi,

thanks for your answer - but,

in searchstring --> Controller View --> AVG Latency, there is no "summariesonly=true"

| `tstats` avg(read_latency_average),               avg(write_latency_average),               avg(other_latency_average),               from netapp_perf_volume groupby _time span=2m, host  | search  [search `SystemHostname("frainnad1n1")`]  | eval psrsvd_sm_read_latency_average=psrsvd_sm_read_latency_average/1000 | eval psrsvd_sm_write_latency_average=psrsvd_sm_write_latency_average/1000 | eval psrsvd_sm_other_latency_average=psrsvd_sm_other_latency_average/1000 | timechart                avg(read_latency_average) AS "Read Latency",                avg(write_latency_average) AS "Write Latency",               avg(other_latency_average) AS "Other Latency" by host

Result: no result found.

Prior to update to ver 2.1.0 - search is running fine.

Any other ideas

greetings NIK

0 Karma

Masa
Splunk Employee
Splunk Employee

The search string is incorrect for the version 2.1.0. It is supposed to be "from datamodel=NetApp_ONTAP". So, that tells you're using v2.0.3 ontap app view, not v2.1.0. Please review upgrade and make sure all packages TA and app are v2.1.0 first.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...