All Apps and Add-ons

Install collectd

bbhandari012
Explorer

How do i download the collectd app for splunk ? and configured it with splunk forwarder ?

0 Karma

nexinto
New Member

The graphite plugin seems to be fine, but we need more infos's.

here is an example of our plugin:

LoadPlugin write_graphite

Host "hostname-relay"
Port "xxxxx"
StoreRates false
AlwaysAppendDS false
EscapeCharacter "."
SeparateInstances true

Did you try to get some data into your indexer?
At your splunk server you have to configure data inputs for your specific collectd port. ( TCP)

0 Karma

bbhandari012
Explorer

I opened the port as well on the indexer.
telnet 52.33.140.2 10001
Trying 52.33.140.2...
Connected to 52.33.140.2.
Escape character is '^]'.

This is the output from the indexer
/opt/splunk/bin/splunk enable listen 10001 -auth admin:abc123
Configuration for port 10001 already exists.

netstat -anp | grep 10001
tcp 0 0 0.0.0.0:10001 0.0.0.0:* LISTEN 23735/splunkd

Yes, i tried to get the data into the index.
LoadPlugin cpu
LoadPlugin df
And here is the error msg on the client machine,
forwarder collectd[21107]: write_graphite plugin: send to 52.33.140.2:10001 (tcp) failed with status -1 (Broken pipe)

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Go to the app page on splunkbase, hit the big green VISIT SITE button, get redirected to https://github.com/nexinto/collectd and follow instructions there.

0 Karma

bbhandari012
Explorer

I followed the instruction, but no luck. I installed the collectd in my indexer as well as on client machine. On indexer i allowed the port 10001 as well. But i am gettting the following error on the client.
Mar 15 01:30:16 forwarder collectd[21107]: write_graphite plugin: send to 52.33.140.2:10001 (tcp) failed with status -1 (Broken pipe)

My collectd.conf
Plugin write_graphite

Host "52.33.140.2"          # here goes the splunk indexer / tcp input
Port "10001"
Protocol "tcp"
0 Karma

kbrown_splunk
Splunk Employee
Splunk Employee

On Linux try netcat to confirm your connection is open
or
telnet 52.33.140.2 10001

Also your collectd.conf does not look like it is in the XML format shown in the readme

collectd.conf:




Host "127.0.0.1" # log to the localhost
Port "5000"
Protocol "tcp"


0 Karma

bbhandari012
Explorer

There is the connection, i verified with the telnet. Its in xml format as well.

Host "52.33.140.2"
Port 10001
 Protocol "tcp"
0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...