All Apps and Add-ons

SOS app - no data in CPU/Memory dashboard?

echojacques
Builder

Hello,

I installed the SOS app today to troubleshoot some performance issues with my Splunk 5.0.4 + ES installation. For the SOS app installation, I have:

SOS 3.0.1
TA SOS for Splunk - Linux/Unix 2.0.4
Sideview Utils 1.3.5

When within the SOS app, most of the screens/dashboards work (have data). However, the most important dashboard (for me) is the Resource Usage - CPU/Memory dashboard and it's blank ( no results found).

I ran ./ps_sos.sh and I'm still not seeing any data for CPU and memory usage.

Any ideas?

Thanks.

0 Karma
1 Solution

hexx
Splunk Employee
Splunk Employee

You can't just run the ps_sos.sh manually, this is a scripted input that you need to enable.

Please read the following Splunk Answers to find out how to do so:

View solution in original post

adrianathome
Communicator

2 things come go mind.

  1. Ensure that the inputs are enabled on the sos add on inputs.conf.
  2. Run bash -x ps_sos.sh and see if you see any errors. Missing program or a path issue.

hexx
Splunk Employee
Splunk Employee

You can't just run the ps_sos.sh manually, this is a scripted input that you need to enable.

Please read the following Splunk Answers to find out how to do so:

Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...