Deployment Architecture

Performance problem OPC UA for Splunk

CleberLupianhez
New Member

Hi,

I'm having problems when getting metrics to add a new input on OPC UA for Splunk.
My OPC server is conected with OPC UA on Splunk but the process to getting metrics does not end and does not appear error messages too. Please, see the screens below.

Is import to say that my OPC server has almost 17000 TAGs, by default all them are enable to reading by OPC Client and is not possible to manipulate it.

I did the following tests:
1) the OPC server was conected with three others differents OPC clients normally, so its not problem with OPC server.
2) the number of TAGs on OPC server was reduced to a hundred and was possible add new inputs without problems.
3) when TAG's numbers was restaured to 17000 the input's quality added on test 2 passed to "BAD".
4) lastly, I used the Read Node's structure of test 2 trying to add inputs manually but its unenable too. EX.: [{"NodeID":{"IdentifierType":1,"NamespaceIndex":2,"Identifier":"0:SERVER.P10_300614.F_CV"},"Tag":"objects.Intellution.OPCiFIX.SERVER.AI.P10_300614.F_CV"}]

It seems the OPC UA Splunk is not able to get the metrics due to number of TAGs of the OPC server.

Has anyone doing similar? Can someone help me?

alt text
alt text

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...