All Apps and Add-ons

Why does Dell EMC PowerMax Add-on for Splunk doesn't work on distributed environment?

Doussou5
Loves-to-Learn Lots

Hello 

I am trying collect data from powermax Array with Dell EMC Add-on,  during my test on dev environment (standalone mode) everything was working perfectly.

When I turn on my Prod environment, any data is coming, It seems like my heavy forwarder receive data but doesn't send them to indexers. I don't see any error in my ta_dellemc_vmax_inputs.log file.

Here are some informations about my environment:

  • My dev environment in which everything working well :

1 search head with Linux RHEL7.9 and Splunk 8.2.3

  • My Prod environment :

 Heavy Forwarder :  Linux 3.10.0 RHEL7.9 and Splunk 8.1.6

Indexers : Linux 3.10.0  RHEL7.9 and Splunk 8.2.3

search heads :  Linux 3.10.0 and Splunk 8.2.3

Some logs from ta_dellemc_vmax_inputs.log

2022-02-07 19:01:55,649 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Passed performance timestamp recency check: 1644258000000.
2022-02-07 19:01:55,650 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Starting metrics collection run.
2022-02-07 19:01:56,003 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Array collection complete.
2022-02-07 19:01:56,085 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | SRP collection complete.
2022-02-07 19:01:59,258 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Storage Group collection complete.
2022-02-07 19:02:00,386 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Director collection complete.
2022-02-07 19:02:00,387 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Finished collection run.
2022-02-07 19:02:00,388 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Completed metrics collection run in 6 seconds.

Please could you help me to resolve this issue or give some advice about configurations ? 

Thanks.

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...