I have Splunk 5 on Windows, today i installed SOS 2.3.0, but i do not see graphs in Resource Usage>Splunk CPU/Memory Usage, only No results found. Inspect ...
Did somebody have the same problem and what`s way to resolve problem?
Today we have published a maintenance release (2.3.1) of the S.o.S app to address certain compatibility issues with Splunk 5.x. I encourage you to test this new version which will hopefully resolve any problems you currently are experiencing.
hi andrey2007
I have S.o.S. now running for some time on Splunk 5 and had no problem. what do the logs report?
cheers,
MuS
yes this is for sure the reason for not getting any data. Try to run the powershell.cmd ps_sos.ps1 command manually as the user how runs splunk
from splunkd.log
ERROR ExecProcessor - message from ""D:\Program Files\Splunk\etc\apps\sos\bin\sospowershell.cmd" ps_sos.ps1" "Powershell" \xAD\xA5 \xEF\xA5\xE2\xE1\xEF \xA2\xAD\xE3\xE2७\xAD\xA5\xA9 \xA8\xAB\xA8 \xA2\xAD\xA5譥\xA9
i think this is reason, but what does it mean?
what version of SOS sshould i follow for splunk start working?
I just followed the instruction and it works for me.
again my question: what does splunkd.log reports about S.o.S. App?
i saw this file but there nothing about splunk 5 and SOS 2.3.0
well how about splunkd.log?
did you follow the $SPLUNK_HOME/etc/apps/sos/README for the setup?
What logs? Should i set windows event log as input?