fschange not working in high load setups

[strive]

Hi,

We have two kinds of setups. One setup for development where we inject ~2-5 GB data per day. Another one is for performance testing, where we inject ~75-100GB per day.

We have set fschange to $SPLUNK_HOME/etc/dep-apps directory. We have all our apps under this directory.

The pollPeriod is set to 180.

In our development setup fschange works fine. When something changes, the deployment server reloads and changes are pushed to other nodes.
Where as in performance testing setup it is not working.

What could be the reason? Is there any fix.

This is all we have in our inputs.conf for fschange.

[fschange:$SPLUNK_HOME/etc/dep-apps]
pollPeriod = 180

We are using splunk 4.3.1

Thanks

Strive

[miteshvohra · Accepted solution]

Which version of Splunk are you using? According to the online documentation and release notes, 'fschange' monitor is deprecated in version 5.x.

HTH, Mitesh.

[strive]

We are using 4.3.1