How can I tell what is downloading from the Splunk Deployment Server

[a212830]

Hi,

The inital page for forwarder management shows the number of clients, the number of clients with errors, and the number of
"total downloads". What does the last one represent? Total downloads over what time period? Does it include active downloads? How can I determine active downloads?

[sloshburch]

I would recommend asking the documentation team to app an explanation. This page appears to be the best target: http://docs.splunk.com/Documentation/Splunk/6.3.3/Updating/Forwardermanagementoverview

I've found great success with the "Was this topic useful" section.

[jcrabb_splunk · Accepted solution]

In earlier versions of Splunk (6.1 for example), it just says "Total Downloads" which is very ambiguous. In newer versions this is corrected and it instead says "Total Downloads in the last 1 hour".

As this is not as clear in Splunk 6.1.x, I looked at ClientsSumary.js for "Total Downloads" and found the following:

//Get number of downloads in the last hour
                var recentDownloads = new RecentDownloadsCollection();
                var numSecondsInOneHour = 3600;
                recentDownloads.fetch({
                                data:{
                                    count: 1,
                                    maxAgeSecs: numSecondsInOneHour
                                },
                                success: function(recentDownloads, response){
                                    var numDownloads = "N/A";

                                    if (recentDownloads.length > 0){
                                        numDownloads = recentDownloads.first().entry.content.get('count');
                                        that.$('#downloadsLabel').html(i18n.ungettext("Total download", "Total downloads", numDownloads));
                                    }
                                    that.$('#numDownloadsInLastHour').html(numDownloads);
                                }
                });

                var html = this.compiledTemplate({_:_});
                this.$el.html(html);

Which I believe references this counter and specifies "Get number of downloads in the last hour". This file is located in $SPLUNK_HOME/share/splunk/search_mrsparkle/exposed/js/views/deploymentserver/.

[MuS]

Hi a212830,

index=_internal will provide data for the last 30 days (that's the default retention for this index). If you search like this:

  index=_internal sourcetype=splunkd deployedapplication

you will get a nice bunch of information out of it.

Hope this helps ...

cheers, MuS

[a212830]

Thanks. Found that. I guess my main question is what does that "Total downloads" represent. I can't find anything in the doc that addresses what that number actually means.