All Apps and Add-ons

SoS performance scripts on AIX?

Jason
Motivator

It appears that the built in ps_sos.sh and ps_lsof.sh scripts do not output any data on AIX.

Are the scripts any different from the ones that come with the *NIX app? Could the *NIX app scripts be substituted in?

1 Solution

hexx
Splunk Employee
Splunk Employee

As you have guessed, these two scripts are built on ps.sh and lsof.sh from the *nix app. However, the branch-off occurred before AIX support was added to the *nix app, which explains why ps_sos.sh and lsof_sos.sh don't work on AIX.

Integrating AIX support into those scripts shouldn't be a big deal. I have opened a requirement (internal reference: SUP-518) on your behalf to add this functionality to a future release of SoS.

View solution in original post

hexx
Splunk Employee
Splunk Employee

As you have guessed, these two scripts are built on ps.sh and lsof.sh from the *nix app. However, the branch-off occurred before AIX support was added to the *nix app, which explains why ps_sos.sh and lsof_sos.sh don't work on AIX.

Integrating AIX support into those scripts shouldn't be a big deal. I have opened a requirement (internal reference: SUP-518) on your behalf to add this functionality to a future release of SoS.

Jason
Motivator

The ps script from the *nix app didn't work on our AIX anyways. Back to square one.

0 Karma

hexx
Splunk Employee
Splunk Employee

I would rather recommend not doing so, although it might work. Our modifications to ps.sh mainly was to introduce an awk-based filter to restrict the output of the script to processes that only matched splunkd's and splunkweb's PIDs, as well as any search process. For lsof.sh, we added a similar level of scoping by providing splunkd's and splunkweb's PIDs as arguments to the lsof command.

0 Karma

Genti
Splunk Employee
Splunk Employee

The formatting (within the script) is a bit different, if i remember correctly. But you should be able to do a diff and see what those differences are between ps_sos and regular ps)

0 Karma

Jason
Motivator

Can I drop the scripts from the current *NIX straight into SoS, or is the data format different?

0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...