All Apps and Add-ons

Why does Dell EMC PowerMax Add-on for Splunk doesn't work on distributed environment?

Doussou5
Loves-to-Learn Lots

Hello 

I am trying collect data from powermax Array with Dell EMC Add-on,  during my test on dev environment (standalone mode) everything was working perfectly.

When I turn on my Prod environment, any data is coming, It seems like my heavy forwarder receive data but doesn't send them to indexers. I don't see any error in my ta_dellemc_vmax_inputs.log file.

Here are some informations about my environment:

  • My dev environment in which everything working well :

1 search head with Linux RHEL7.9 and Splunk 8.2.3

  • My Prod environment :

 Heavy Forwarder :  Linux 3.10.0 RHEL7.9 and Splunk 8.1.6

Indexers : Linux 3.10.0  RHEL7.9 and Splunk 8.2.3

search heads :  Linux 3.10.0 and Splunk 8.2.3

Some logs from ta_dellemc_vmax_inputs.log

2022-02-07 19:01:55,649 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Passed performance timestamp recency check: 1644258000000.
2022-02-07 19:01:55,650 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Starting metrics collection run.
2022-02-07 19:01:56,003 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Array collection complete.
2022-02-07 19:01:56,085 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | SRP collection complete.
2022-02-07 19:01:59,258 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Storage Group collection complete.
2022-02-07 19:02:00,386 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Director collection complete.
2022-02-07 19:02:00,387 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Finished collection run.
2022-02-07 19:02:00,388 INFO pid=4607 tid=MainThread file=base_modinput.py:log_info:295 | Input: data_input_vmax_xxxx | Array: xxxxxxxxxxxxx | Completed metrics collection run in 6 seconds.

Please could you help me to resolve this issue or give some advice about configurations ? 

Thanks.

Labels (3)
0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...