Monitoring Splunk

Why can't we launch an Indexer Health RapidDiag?

kvnpichon
Path Finder

Hi,

I recently upgraded to Splunk 8.2.2.1, when I try to collect a RapidDiag report in Settings > RapidDiag > Indexer Health I have the following errors :

System Call Trace > Could not detect `strace` for the root user. on following instance(s) => Indexers

Network Packet > Could not detect `tcpdump` for the root user. on following instance(s) => Indexers

IOPS > Could not detect `iostat` for the splunk user. on following instance(s) => Indexers

Stack Trace > Could not detect `eu-stack` for the root user. on following instance(s) => Indexers

All indexers are running Splunk 8.2.2.1 on Debian 9.13.

Any idea ?

Labels (2)
0 Karma

emottola
Explorer

You need to install the following packages to get these commands:

"strace" to get the strace command
"tcpdump" to get the tcpdump command
"sysstat" to get the iostat command
"elfutils"  to get the eu-stack command

 

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

.conf25 Global Broadcast: Don’t Miss a Moment

Hello Splunkers, .conf25 is only a click away.  Not able to make it to .conf25 in person? No worries, you can ...

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...