Dashboards & Visualizations

Splunk implements Graphite?

tpaulsen
Contributor

Has someone ever tried to implements Graphs or at least data from Graphite into a Splunk Dashboard? How can we do that? We would like to compare a Splunk timechart with a Graphite Graph on the same Dashboard. And we don´t want to import the data from graphite into Splunk, just use Splunk as a Dashboard.

Many thanks, Thomas

groland
Explorer

Another really good app for this: https://splunkbase.splunk.com/app/2664/

0 Karma

ampledata
Splunk Employee
Splunk Employee

Here's an app for getting Splunk data back out into Graphite: https://github.com/OnBeep/splunk_graphite

halr9000
Motivator

You could do this with the Splunk 6 web framework. Create a dashboard, convert it to HTML, and then do whatever you want to in the HTML to integrate your Graphite stuff. I don't have any experience with Graphite to explain that part.

And if you do want to take data that you are already sending to Carbon/Graphite, but send it to Splunk instead, it's trivial to read the same data format in Splunk. I wrote a blog post on the topic which explains the steps, which you'll see are pretty simple.

bbhandari012
Explorer

I installed collectd on the client machine which already has the splunk forwarder running on it.
LoadPlugin write_graphite

Host "52.32.76.219"  #indexer ip
Port 10001
 Protocol "tcp"
 LogSendErrors true
 Prefix "collectd"
 Postfix "collectd"

and on the indexer, i allowed the port 10001.
/opt/splunk/bin/splunk enable listen 10001 -auth admin:*******
But i am not getting the results from the client machine. Also, client shows the following error
collectd[21107]: write_graphite plugin: send to 52.32.76.219:10001 (tcp) failed with status -1 (Broken pipe).

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Get Agentic with Splunk Lantern: Connect to Cisco Cloud Control, Transform ...

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

July Community Events: Master ITSI 5.0 & Automate Splunk

Struggling with alert fatigue or feeling like you're spending more time on infrastructure maintenance than ...

New Release of Federated Search: Bringing Splunk Analytics to More of Your Data

Organizations today are generating more data than ever and storing it across cloud object stores, data lakes, ...