All Apps and Add-ons

Why is DELL EMC ECS add-on lacking performance logs?

Flem
Observer

Hi, recently I tried to configure Splunk TA and APP for DELL EMC ECS Storage device. After Installation and initial configuration everything looks fine except lacking performance data. Capacity and inventory data are available in DELL EMC ECS App overview dashboard but I'm lacking performance data. 

Here's few details about the current settings and scenario:

- App and Add On are installed on Search Head Cluster, and Add on installed on HF

- Splunk is 9.0.5 version (higher than reccomended in add on documentation)

- App and Addons are updated to latest versions

- DELL EMC ECS Device is running 3.7.0.3

- There is communication between devices (obviously as we are ingested some data from ECS device)

- Splunk Python version on HF is 3.7 (OS version is 2.7 I don't think it matters :P)

- Management user with system monitor privileges is created on DELL EMC ECS device and used by splunk

- As documentation claims I provided IP of one of the nodes in VDC (not virtual IP)

- I even raised timeout setting in  ecs_connect.py to 60 (but there were no timeout errors in the logs)

 

I know that performance data should be ingested via flux api and I see some data from various dell:flux:* sources but it seems not to be the date expected by Dell EMC ECS overview dashboard (or it is not parsed correctly, which I really doubt as it's official supported APP from splunkbase).

 

In logs I can see one error that occurs everytime when Dell EMC ECS input data ingestion happens. The error is "product version" which seems really vague for me. Apart from that I can't find anything useful in the logs. 

As far as I know nothing else has to be done on the device itself so I'm kind of lost  ... Do You have any ideas what else can I check or maybe You encountered similar problems ?

P.S I contacted App vendor and waiting for any response if I find solution in the meantime I'll put it here for potential other people who may encounter this really weird problem .


Best Regards

 

Labels (1)
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...