All Apps and Add-ons

Why is DELL EMC ECS add-on lacking performance logs?

Flem
Observer

Hi, recently I tried to configure Splunk TA and APP for DELL EMC ECS Storage device. After Installation and initial configuration everything looks fine except lacking performance data. Capacity and inventory data are available in DELL EMC ECS App overview dashboard but I'm lacking performance data. 

Here's few details about the current settings and scenario:

- App and Add On are installed on Search Head Cluster, and Add on installed on HF

- Splunk is 9.0.5 version (higher than reccomended in add on documentation)

- App and Addons are updated to latest versions

- DELL EMC ECS Device is running 3.7.0.3

- There is communication between devices (obviously as we are ingested some data from ECS device)

- Splunk Python version on HF is 3.7 (OS version is 2.7 I don't think it matters :P)

- Management user with system monitor privileges is created on DELL EMC ECS device and used by splunk

- As documentation claims I provided IP of one of the nodes in VDC (not virtual IP)

- I even raised timeout setting in  ecs_connect.py to 60 (but there were no timeout errors in the logs)

 

I know that performance data should be ingested via flux api and I see some data from various dell:flux:* sources but it seems not to be the date expected by Dell EMC ECS overview dashboard (or it is not parsed correctly, which I really doubt as it's official supported APP from splunkbase).

 

In logs I can see one error that occurs everytime when Dell EMC ECS input data ingestion happens. The error is "product version" which seems really vague for me. Apart from that I can't find anything useful in the logs. 

As far as I know nothing else has to be done on the device itself so I'm kind of lost  ... Do You have any ideas what else can I check or maybe You encountered similar problems ?

P.S I contacted App vendor and waiting for any response if I find solution in the meantime I'll put it here for potential other people who may encounter this really weird problem .


Best Regards

 

Labels (1)
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

What Is Splunk? Here’s What You Can Do with Splunk

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

Level Up Your .conf25: Splunk Arcade Comes to Boston

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...

Manual Instrumentation with Splunk Observability Cloud: How to Instrument Frontend ...

Although it might seem daunting, as we’ve seen in this series, manual instrumentation can be straightforward ...