Splunk 4.3.2 SoS 2.3.1 MacOS X 10.6
Enabled ps_sos.sh with no problem. Splunk CPU/MEMORY usage dashboard working fine.
Enabled lsof_sos.sh . Splunk File Descriptor Usage dashboard single counter values show 0, all other panels no results.
index=_internal execprocessor *lsof_sos.sh :
INFO ExecProcessor - Ran script: /home/ricker/opt/splunk/etc/apps/sos/bin/lsof_sos.sh, took 252.0 milliseconds to run, 0 bytes read, exited with code 1
Bug in lsof_sos.sh ?
Fixed in SoS 3.0.1!!!
Thank you for the information provided. I have opened a bug against the S.o.S app (internal reference: SUP-649) to have this investigated and fixed. Hopefully, we can easily reproduce this in-house.
blank, nada
What output, if any, does the following command produce?
# $SPLUNK_HOME/bin/splunk cmd $SPLUNK_HOME/etc/apps/sos/bin/lsof_sos.sh
lsof runs with results as stated in http://splunk-base.splunk.com/answers/78143/why-is-lsof_sossh-not-returning-any-data