Could even go simpler and just list client ips that haven't appeared in the last 24 hours and last data time with sourcetype="access combined" earliest=-2d@d latest=+d@d | dedup clientip | where _time"<"now()-86400 | table host _time
... View more
I have recently installed the Splunk app for Cisco UCS and am having trouble getting data. The installation seemed simple enough, I edited the credentials.csv and managers.csv files for the Splunk_TA_CiscoUCS with the correct format, as outlined in the readme and then copied the apps into /opt/splunk/etc/apps (single-server). the ucs-authentication_domain_name is correct as is the user and password (tested with ssh) and the UCS manager can communicate with the splunk server.
After restarting the splunk service the app itself is available, but data is unavailable.
I have manually run the python Collect.py script with the options outlined in the inputs.conf with no errors at all.
python /opt/splunk/etc/apps/Splunk_TA_CiscoUCS/bin/Collect.py faultInst
python /opt/splunk/etc/apps/Splunk_TA_CiscoUCS/bin/Collect.py equipmentFex equipmentIOCard equipmentSwitchCard equipmentChassis equipmentPsu computeBlade computeRackUnit fabricDceSwSrvEp etherPIo fabricEthLanEp fabricEthLanPc fabricEthLanPcEp fabricVlan fabricVsan lsServer vnicEtherIf vnicFcIf storageLocalDisk firmwareRunning statsCollectionPolicy]
python /opt/splunk/etc/apps/Splunk_TA_CiscoUCS/bin/Collect.py topSystem equipmentChassisStats computeMbPowerStats computeMbTempStats processorEnvStats equipmentPsuStats adaptorVnicStats etherErrStats etherLossStats etherRxStats etherPauseStats etherTxStats swSystemStats]
and still do not see data. There doesn't seem to be any useful info in any of the log files to point me in the right direction.
Has anyone has any experience with this, and managed to get it working with data? If so, did you have to perform any additional steps other than those outlined in the readme file?
I'm new to splunk, so it is possible there is somewhere i am not checking that i might not be aware of.
... View more