Hi Everyone,
I have 5 instances of Splunk running my Mac (Big Sur v11.6):
- SH+IDX
- DPL
- HFWD
- UF (sending to HFWD)
- UF (sending to IDX)
All working pretty well, but there are a few hick-ups running on MacOSX (Big Sur, 11.6), and the new major one I've run it to is there is NO introspection (Resource Usage) collected!
The "resource_usage.log" is completely empty, and running :
/opt/splunk_dpl/bin/splunkd instrument-resource-usage -p 8087 --with-kvstore --debug
Writes:
I-data gathering (Resource Usage) not supported on this platform.
DEBUG RU_main - I-data gathering (IOWait Statistics) not supported on this OS
WARN WatchdogActions - Initialization failed for action=pstacks. Deleting.
DEBUG InstrumentThread - Entering 0th iter (thread KVStoreOperationStatsInstrumentThread)
DEBUG InstrumentThread - Entering 0th iter (thread KVStoreCollectionStatsInstrumentThread)
DEBUG InstrumentThread - Entering 0th iter (thread KVStoreServerStatusInstrumentThread)
DEBUG InstrumentThread - Entering 0th iter (thread KVStoreProfilingDataInstrumentThread)
DEBUG InstrumentThread - Entering 0th iter (thread KVStoreReplicaSetStatsInstrumentThread)
1. Does this really mean there is no support for resource usage on Mac, og am I getting something wrong here?
To me there is not really that much difference between a Mac and a Linux box (while knowing there are some differences) , and most commands run on a linux are run the exact same way on a mac.
2. If this does not come out of the box, how can it be enabled?
3. Which processes are run on linux to exactly fulfill the "Resource Usage" and IOWait stats, that one could try move into the mac?
4. Does anyone know exactly how and where the scripts/processes are configured in Splunk to facilitate this?
Any core details would be most appreciated.
Cheers,
Bjarne
