Getting Data In

Resolve error: Splunk_TA_nix awk: record `HARD_DRIVES ssd2262 ...' too long?

maharshidave
Splunk Employee
Splunk Employee

Hi Team,

Using Splunk_TA_nix addon Version 8.4. While running below three scripts getting below Errors.  Customer is using Solaris 10 OS. 

Splunk_TA_nix/bin/vmstat_metric.sh" awk: record `HARD_DRIVES ssd2262 ...' too long
Splunk_TA_nix/bin/vmstat.sh" awk: record `HARD_DRIVES ssd1038 ...' too long
Splunk_TA_nix/bin/hardware.sh" awk: record `HARD_DRIVES ssd1038 ...' too long

upgraded Addon to the latest version 8.5, but after that below issue has been started and no data was ingested. 

Splunk_TA_nix/bin/uptime.sh: $(dirname /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/uptime.sh)/common.sh: not found
Splunk_TA_nix/bin/cpu_metric.sh: $(dirname /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/cpu_metric.sh)/common.sh: not found

So to solve, rollback Addon to version 8.4 but again awk: record `HARD_DRIVES ssd1038 error started.
Can anyone help to solve this issue. 

Labels (1)
0 Karma

akriti
Explorer

Hi @maharshidave . Were you able to resolve this issue? I'm getting the same error as you got after upgrading to 8.5.

Splunk_TA_nix/bin/uptime.sh: $(dirname /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/uptime.sh)/common.sh: not found
Splunk_TA_nix/bin/cpu_metric.sh: $(dirname /opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin/cpu_metric.sh)/common.sh: not found

Please share your solution if you were able to resolve it.

Thanks!

0 Karma
Get Updates on the Splunk Community!

Introducing Splunk Enterprise 9.2

WATCH HERE! Watch this Tech Talk to learn about the latest features and enhancements shipped in the new Splunk ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...