Monitoring Splunk

Why can't we launch an Indexer Health RapidDiag?

kvnpichon
Path Finder

Hi,

I recently upgraded to Splunk 8.2.2.1, when I try to collect a RapidDiag report in Settings > RapidDiag > Indexer Health I have the following errors :

System Call Trace > Could not detect `strace` for the root user. on following instance(s) => Indexers

Network Packet > Could not detect `tcpdump` for the root user. on following instance(s) => Indexers

IOPS > Could not detect `iostat` for the splunk user. on following instance(s) => Indexers

Stack Trace > Could not detect `eu-stack` for the root user. on following instance(s) => Indexers

All indexers are running Splunk 8.2.2.1 on Debian 9.13.

Any idea ?

Labels (2)
0 Karma

emottola
Explorer

You need to install the following packages to get these commands:

"strace" to get the strace command
"tcpdump" to get the tcpdump command
"sysstat" to get the iostat command
"elfutils"  to get the eu-stack command

 

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...