All Apps and Add-ons

Fire Brigade version 2.0.3: How to troubleshoot why indexes are missing from fb_hostname_index_cache?

wsnyder2
Path Finder

When I use Firebrigade, ver 2.0.3, Index Detail, pick a host, the drop down menu under index is not a complete list of all our indexes. In other words the csv file, fb_hostname_index_cache, is incomplete. It is missing some/many of our defined indexes.

Any suggestions for troubleshooting this? I would like to use FB to monitor size of all of our indexes.

ppablo
Retired

FYI, Fire Brigade version 2 will no longer be updated (latest version is 2.0.3). The newer versions 2.0.4 and higher will now be available with the original “Fire Brigade” app on Splunkbase which was just updated to support Splunk 6.3. This is noted on the page for Fire Brigade on Splunkbase:
https://splunkbase.splunk.com/app/1581/

If you have any questions, ping the developer of the app @sowings

Cheers!

0 Karma

sowings_splunk
Splunk Employee
Splunk Employee

The fb_hostname_index_cache is populated from the nightly dbinspect output that is part of the TA. That is, the TA collects information about indexes that have data (on a per host basis), and the app on the SH caches that. If the index doesn't appear in the list, then it doesn't have any data.

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...