Splunk Enterprise

Linux ps.sh script giving incorrect CPU usage information

mdeeds
New Member

We are having an issue with the "Splunk_TA_nix/bin/ps.sh" script and the way it's reporting cpu usage for servers with multiple cpu's. It caps the cpu at 100, but that value can actually go up to the number of cpu's * 100. So a server with 32 CPU's can reach 3200. Limiting that value to 100 seems to gives incorrect information.

Can anyone give some insight into what's going on here? We are on Enterprise 7.3 if that makes a difference.

Thanks

Labels (3)
0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...