Poller location

[tdeboeser]

Hi,
I've got everything configured and ready to go, but I can't find the "F5LTMPoolMonitoring-Poller" executable. I only have a directory with that name and nothing else. I the name of the poller actually "F5LTMPoolMonitoring-Poller"? If so, I'll need to re-install the app.

Thanks

[D2SI]

Hello,
It is located in the install folder of the App.

[tdeboeser]

Thanks,
What I have in the install folder is:

ls /opt/splunk/etc/apps/F5LTMPoolMonitoring/install
metadata
bin
local

In bin/ i have:

snmp_f5_monitor_status_big-ip_name.sh
snmp_f5_cur_conns_big-ip_name.sh
snmp_f5_failover_status_big-ip_name.sh
snmp_f5_sync_status_big-ip_name.sh

Do I need to set a cron job for the scripts?

[D2SI]

Hello,

No cron job needed, just use scripted inputs examples provided in F5LTMPoolMonitoring-Poller/local/inputs.conf:

[script://./bin/snmp_f5_monitor_status_big-ip_name.sh]
interval = 120
index =
sourcetype = f5:bigip:ltm:snmp:monitor:status
host =

Just set the index name and, if needed, the host name

[tdeboeser]

Thanks again for the help. I don't think our install is OK. The index isn't being populated, and I don't see of the 'sourcetypes".

Using "sourcetype="f5:bigip:ltm:snmp:monitor:status" returns nothing ( "0" ). Would it be wise to try and reinstall?

snmpwalk at the CLI works as expected.

Thanks

[D2SI]

Hello,

Make sure to move the folder F5LTMPoolMonitoring-Poller from /opt/splunk/etc/apps/F5LTMPoolMonitoring/install to /opt/splunk/etc/apps.

Make also sure that the specified index exists.

[tdeboeser]

Made this move, still nothing. Index exists and is configured in inputs.conf. Nothing when searching sourcetype="f5:bigip:ltm:snmp:monitor:status" .

Not sure where to look now...

[D2SI]

Well if you had not made this move earlier, it would need a restart.

Did you test and adapt the shell scripts from the same instance it is running ?

Did you configure the shell script to be executable?

[niketn]

@tdeboeser , could you please confirm whether your issue is resolved? If not kindly provide further details so that community members can assist you better!

[tdeboeser]

I'll be working on this today. If successful I'll update the page.

Thanks

[iamarkaprabha]

@niketnilay , Can you convert this comment to an answer as this is already answered correctly