All Apps and Add-ons

Non-Repoonding hosts lists non F5

mmacdonald70
Explorer

I have recently installed the F5 Analytics app and it works well with one exception.

For some reason that I am unable to figure out, on the Dashboard, the non-responding hosts section lists every device that is monitored in Splunk (we also monitor Syslog from several hundred network devices).

Any idea how to fix this?

0 Karma

kbocchino
Explorer

Ideally you should be sending data from the HTTP Event Collector for F5 Devices to a specific index example: f5-default. If you have all of the BIG-IPs going to F5 only indexes you would then update the f5_index macro to index name and that will prevent all hosts from being listed.

mmacdonald70
Explorer

I can't believe that I missed that index=* line. Index updated and it works as expected. Thank you

0 Karma

prakash007
Builder

we did define specific index name in f5_index macro, still we see different hosts in non-responding hosts...did you get this resolved...??

0 Karma

j0shrice
Path Finder

Also interested in if this was resolved?

0 Karma
Get Updates on the Splunk Community!

Cisco Use Cases, ITSI Best Practices, and More New Articles from Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...

Exporting Splunk Apps

Join us on Monday, October 21 at 11 am PT | 2 pm ET!With the app export functionality, app developers and ...