SoS version 2.3.1 - build 145107 lsof_sos.sh exit 1

[rroberts]

Splunk 4.3.2 SoS 2.3.1 MacOS X 10.6

Enabled ps_sos.sh with no problem. Splunk CPU/MEMORY usage dashboard working fine.

Enabled lsof_sos.sh . Splunk File Descriptor Usage dashboard single counter values show 0, all other panels no results.

index=_internal execprocessor *lsof_sos.sh :
INFO ExecProcessor - Ran script: /home/ricker/opt/splunk/etc/apps/sos/bin/lsof_sos.sh, took 252.0 milliseconds to run, 0 bytes read, exited with code 1

Bug in lsof_sos.sh ?

[rroberts]

Fixed in SoS 3.0.1!!!

[hexx]

Thank you for the information provided. I have opened a bug against the S.o.S app (internal reference: SUP-649) to have this investigated and fixed. Hopefully, we can easily reproduce this in-house.

[rroberts]

blank, nada

[hexx]

What output, if any, does the following command produce?

# $SPLUNK_HOME/bin/splunk cmd $SPLUNK_HOME/etc/apps/sos/bin/lsof_sos.sh

[rroberts]

lsof runs with results as stated in http://splunk-base.splunk.com/answers/78143/why-is-lsof_sossh-not-returning-any-data