I have successfully setup the add-on (as I thought).
I have setup the app with a query that runs every 24 hours and gets all the subnets from IPAM Solarwinds.
And it worked for a couple of days.
But one day I noticed that out of 1267 nets available in IPAM it imported only 215. Yet the other day it imported all of the nets successfully.
Checking my query with SWQL Studio always returned all the available 1267 subnets. So I believe it is not the query problem.
If a disable and enable the input I created in the add-on (to rerun it) after one or two hits it imports all the subnets. That's very odd.
Turning on debugging and examining the add-on log did not reveal any errors. The output is just the same when it gets all the records and when it doesn't.
The other strange thing I noticed is that when I enable the input and look at the Splunk search in real-time I see the following "215 of 1267 events matched". That is what I see when not all of the events get imported from IPAM.
Could you some help.
Thanks in advance!
... View more