Activity Feed
- Posted system metrics not working properly for AIX - vmstat.sh and ps.sh on All Apps and Add-ons. 03-24-2017 09:00 AM
- Tagged system metrics not working properly for AIX - vmstat.sh and ps.sh on All Apps and Add-ons. 03-24-2017 09:00 AM
- Tagged system metrics not working properly for AIX - vmstat.sh and ps.sh on All Apps and Add-ons. 03-24-2017 09:00 AM
- Tagged system metrics not working properly for AIX - vmstat.sh and ps.sh on All Apps and Add-ons. 03-24-2017 09:00 AM
- Posted Re: Why is a REST call so slow on Monitoring Splunk. 11-10-2016 12:00 PM
- Posted Tags - Auto tagging from a csv on Knowledge Management. 10-26-2016 06:07 AM
- Tagged Tags - Auto tagging from a csv on Knowledge Management. 10-26-2016 06:07 AM
- Tagged Tags - Auto tagging from a csv on Knowledge Management. 10-26-2016 06:07 AM
- Tagged Tags - Auto tagging from a csv on Knowledge Management. 10-26-2016 06:07 AM
- Tagged Tags - Auto tagging from a csv on Knowledge Management. 10-26-2016 06:07 AM
- Posted Re: How to create a dashboard from a lookup file that references a Time input field? on Dashboards & Visualizations. 09-14-2016 04:27 AM
- Posted Re: How to create a dashboard from a lookup file that references a Time input field? on Dashboards & Visualizations. 09-14-2016 04:26 AM
- Posted How to create a dashboard from a lookup file that references a Time input field? on Dashboards & Visualizations. 09-13-2016 07:47 AM
- Tagged How to create a dashboard from a lookup file that references a Time input field? on Dashboards & Visualizations. 09-13-2016 07:47 AM
- Tagged How to create a dashboard from a lookup file that references a Time input field? on Dashboards & Visualizations. 09-13-2016 07:47 AM
- Tagged How to create a dashboard from a lookup file that references a Time input field? on Dashboards & Visualizations. 09-13-2016 07:47 AM
- Tagged How to create a dashboard from a lookup file that references a Time input field? on Dashboards & Visualizations. 09-13-2016 07:47 AM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 | |||
0 | |||
0 |
03-24-2017
09:00 AM
Hi. I am on Splunk 6.4.1 with the Unix Add-on (5.2.3). I was wondering if anyone had similar issues or solutions to get the following OS data working on AIX servers :
vmstat.sh --- I get no values (see log below) and I am receiving the following message. I am not sure what is making the script not work. What do you think might be the problem?
SPLUNK LOG
memTotalMB memFreeMB memUsedMB memFreePct memUsedPct pgPageOut swapUsedPct pgSwapOut cSwitches interrupts forks processes threads loadAvg1mi waitThreads interrupts_PS pgPageIn_PS pgPageOut_PS
MANUALLY RAN
[server:splunk]/opt/splunkforwarder/etc/apps/Splunk_TA_nix/bin> ./vmstat.sh
memTotalMB memFreeMB memUsedMB memFreePct memUsedPct pgPageOut swapUsedPct pgSwapOut cSwitches interrupts forks processes threads loadAvg1mi waitThreads interrupts_PS pgPageIn_PS pgPageOut_PS
awk: The field -11 cannot be less than 0.
The input line number is 5.
The source line number is 1.
2 . ps.sh / top.sh -- I am trying to get CPU by process and ps is not cutting it. Below says that splunk is running "0.8", but its actually running around 20% on the server (through top/topas). Has anyone tried getting data through the top/topas command from AIX?
SPLUNK LOG
19136670 - 0.8 1-19:52:10 1.0 370340 347348 - A 9-20:11:23 splunkd --nodaemon_-p_8089__internal_exec_splunkd
... View more
11-10-2016
12:00 PM
Working with SloshBurch on this, and the number of events that we receive are 2817 events. Is that a lot?
... View more
10-26-2016
06:07 AM
Looking to see if this is possible or if there are any other alternatives.
Goal: I am using tags as a search filter for role access and I am looking for an automated way to manage this. Servers may be decommissioned or new servers may pop up so I want to automate as much as possible. An example would be providing an application owners access to ONLY OS logs, web server logs, etc to their application only.
Background: We have indexes for windows logs, unix logs, web server logs, etc, so we cannot have separate indexes for applications. We have an automated job to produce a csv from our CMDB that tells us what application is mapped to which server, so how can we use that to auto-tag?
... View more
09-14-2016
04:27 AM
I understand how to find events between dates, but I am trying to see if its possible for me to use the Time input box on a dashboard for my lookup file even though I set my Open_Date field as _time.
... View more
09-14-2016
04:26 AM
Unfortunately, I have already tried that and it didn't work.
... View more
09-13-2016
07:47 AM
I am trying to create a dashboard from a lookup file that has fields:
Ticket_ID
Open_Date
Close_Date
Description
I am having the hardest time trying to get the Time input field to reference the Open_Date so that it's easier to search for certain tickets between a certain date from a dashboard. I have tried eval _time=Open_Date but that didn't work for me. Any ideas?
Below is a sample of the fields:
Ticket_ID = 123
Open_Date = 9/4/2014 9:07:29 AM
Close_Date = 9/5/2014 9:07:29 AM
Description = This is an example.
... View more