All Apps and Add-ons

Splunk for NetApp - [search `SystemHostname("$name$")`] and few more functions are not working

msaravan
Engager

I have installed the splunk app for Netapp to monitor Netapp cluster-mode servers. (6.0.1)

I have added my cluster-mode system to the app. For this cluster-mode, no data is shown up in the netapp app UI. All the pages are shown blank with no data. When I do the individual search
using index = ontap source="cluster-node-get-iter", I am able to see all the data.

Also, in proactive monitoring -> Cluster view screen, if I change the search string
from [search SystemHostname("$name$")] to index = ontap host = $name$ it works fine.
I suspect some problem in these functions. Can someone please get back whether it is a product
problem or my environment problem.



...

[search SystemHostname("$name$")] source="cluster-node-get-iter" | stats dc(node-name) as num_nodes

Regards,
Saravanan

halr9000
Motivator

Double-check your Splunk role membership for the user who is doing the searching. Check out the install docs which mention the ontap_admin and ontap_user roles. Putting the user account in one of these roles should fix the issue you are seeing.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...