All Apps and Add-ons

Why is DELL EMC ECS add-on lacking performance logs?


Hi, recently I tried to configure Splunk TA and APP for DELL EMC ECS Storage device. After Installation and initial configuration everything looks fine except lacking performance data. Capacity and inventory data are available in DELL EMC ECS App overview dashboard but I'm lacking performance data. 

Here's few details about the current settings and scenario:

- App and Add On are installed on Search Head Cluster, and Add on installed on HF

- Splunk is 9.0.5 version (higher than reccomended in add on documentation)

- App and Addons are updated to latest versions

- DELL EMC ECS Device is running

- There is communication between devices (obviously as we are ingested some data from ECS device)

- Splunk Python version on HF is 3.7 (OS version is 2.7 I don't think it matters :P)

- Management user with system monitor privileges is created on DELL EMC ECS device and used by splunk

- As documentation claims I provided IP of one of the nodes in VDC (not virtual IP)

- I even raised timeout setting in to 60 (but there were no timeout errors in the logs)


I know that performance data should be ingested via flux api and I see some data from various dell:flux:* sources but it seems not to be the date expected by Dell EMC ECS overview dashboard (or it is not parsed correctly, which I really doubt as it's official supported APP from splunkbase).


In logs I can see one error that occurs everytime when Dell EMC ECS input data ingestion happens. The error is "product version" which seems really vague for me. Apart from that I can't find anything useful in the logs. 

As far as I know nothing else has to be done on the device itself so I'm kind of lost  ... Do You have any ideas what else can I check or maybe You encountered similar problems ?

P.S I contacted App vendor and waiting for any response if I find solution in the meantime I'll put it here for potential other people who may encounter this really weird problem .

Best Regards


Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Getting Started with Edge Processor, Machine Learning Toolkit ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...