All Apps and Add-ons

Splunk for *nix technology add-on intervals

rainhailrob
Path Finder

Has anyone seen an issue increasing the intervals for TA running SUSE? When I increase the intervals, the *nix 4.5 app stops updating the graphs.

Here are the intervals I changed:
vmstat- 300
iostat- 600
ps- 300
top- 300
protocol- 300
lsof- 600
df- 600
cpu- 300
fschange- 600

However CPU Overview, Memory Overview, Disk Overview don't work for last 15 mins or last 60 mins. I don't know if there isn't enough data points for the graph? I edited the CPU overview "CPU consumption by command" graph to 2 hours and the graph works. Anything less than 120 mins (even 90 mins) and the graph does not fill in.

0 Karma
1 Solution

araitz
Splunk Employee
Splunk Employee

For short time ranges, the CPU graphs sometimes don't seem to populate as expected. The main reason is that the views were created in Splunk's Simple XML and sparse points are not connected such as to make the timecharts visible. We have just fixed that issue in preparing for the next release of the app. Setting the intervals as long as you did will almost certainly exacerbate the problem.

View solution in original post

0 Karma

araitz
Splunk Employee
Splunk Employee

For short time ranges, the CPU graphs sometimes don't seem to populate as expected. The main reason is that the views were created in Splunk's Simple XML and sparse points are not connected such as to make the timecharts visible. We have just fixed that issue in preparing for the next release of the app. Setting the intervals as long as you did will almost certainly exacerbate the problem.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...