All Apps and Add-ons

Citrix XenServer Technology Add-on (TA-XS60-Server) hypervisor:xenserver:sr sourcetype not being populated correctly

cpayne_satisnet
New Member

The sourcetype hypervisor:xenserver:sr isn't being populated correctly in one of the environments I need to work in.

In the inputs.conf of the TA, it shows that bin/getSR.py is populating this.

When manually running the script by the following from the app directory, it outputs some of the SR's then silently dies.

/opt/splunkforwarder/bin/splunk cmd /usr/bin/python bin/getSR.py

0 Karma

cpayne_satisnet
New Member

I found this was dying on:-
if(srRecord["shared"] and srRecord["other_config"]["XenCenter.CustomFields.vol_name"]):
out += " vol_name=%s" % (srRecord["other_config"]["XenCenter.CustomFields.vol_name"])

I changed the script to be :-

    # added try/except to stop script failing after a couple of records
    try:
        if(srRecord["shared"] and srRecord["other_config"]["XenCenter.CustomFields.vol_name"]):
            out += " vol_name=%s" % (srRecord["other_config"]["XenCenter.CustomFields.vol_name"])
    except:
        pass
0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...