Hi,
We installed the NMON app on our indexer/searchhead and the TA on one of our universal forwarders running AIX (no Python installed). We checked and rechecked the configuration but can't seem to get any data in index=nmon except this:
12/2/14 7:51:27.000 PM starting nmon : /usr/bin/nmon -f -T -A -d -K -L -M -P -^ -s 10 -c 6 in /opt/splunkforwarder/etc/apps/TA-nmon/var/nmon_temp
There is data in the directory TA-nmon/var/nmon-temp and TA-nmon/var/nmon_repository, but never in var/csv_repository. Also, the var/spool directory does not get created until I manually start the script from the bin directory: "cat .nmon | nmon2csv.pl". At that point the csv_repository directory is populated with files and those are correctly indexed.
We have the standard inputs.conf and props.conf (except for the nmon2csv.pl instead of nmon2csv.py) and we can't install Python on the AIX machine, not even for testing.
Any help would be greatly appreciated!
Thanks, Peter
... View more