All Apps and Add-ons

SoS performance scripts on AIX?

Jason
Motivator

It appears that the built in ps_sos.sh and ps_lsof.sh scripts do not output any data on AIX.

Are the scripts any different from the ones that come with the *NIX app? Could the *NIX app scripts be substituted in?

1 Solution

hexx
Splunk Employee
Splunk Employee

As you have guessed, these two scripts are built on ps.sh and lsof.sh from the *nix app. However, the branch-off occurred before AIX support was added to the *nix app, which explains why ps_sos.sh and lsof_sos.sh don't work on AIX.

Integrating AIX support into those scripts shouldn't be a big deal. I have opened a requirement (internal reference: SUP-518) on your behalf to add this functionality to a future release of SoS.

View solution in original post

hexx
Splunk Employee
Splunk Employee

As you have guessed, these two scripts are built on ps.sh and lsof.sh from the *nix app. However, the branch-off occurred before AIX support was added to the *nix app, which explains why ps_sos.sh and lsof_sos.sh don't work on AIX.

Integrating AIX support into those scripts shouldn't be a big deal. I have opened a requirement (internal reference: SUP-518) on your behalf to add this functionality to a future release of SoS.

Jason
Motivator

The ps script from the *nix app didn't work on our AIX anyways. Back to square one.

0 Karma

hexx
Splunk Employee
Splunk Employee

I would rather recommend not doing so, although it might work. Our modifications to ps.sh mainly was to introduce an awk-based filter to restrict the output of the script to processes that only matched splunkd's and splunkweb's PIDs, as well as any search process. For lsof.sh, we added a similar level of scoping by providing splunkd's and splunkweb's PIDs as arguments to the lsof command.

0 Karma

Genti
Splunk Employee
Splunk Employee

The formatting (within the script) is a bit different, if i remember correctly. But you should be able to do a diff and see what those differences are between ps_sos and regular ps)

0 Karma

Jason
Motivator

Can I drop the scripts from the current *NIX straight into SoS, or is the data format different?

0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...