All Apps and Add-ons

After updating the Splunk App for NetApp Data ONTAP from version 2.0.3 to 2.1.0, why is there no Latency data in graphs?

nicolay_koecher
Explorer

Hello Team,

My Environment - Splunt Enterprise 6.3 Netapp Ontap 2.0.3

After updating the Splunk App for NetApp data ONTAP to version 2.1.0, there is no data in filer View AVG Latency, AGV CPU and Total IOPs Rate. Older Data is still available.

Any suggestions?

greetings NIK

0 Karma

Masa
Splunk Employee
Splunk Employee

Hi,
If you just upgraded to v2.1.0, Data Model Acceleration might not be completed in the time range.
1. In bottom left of a chart panel, please click search icon to open a search string in a search view.
2. Look for "summariesonly=true", and replace it with "summariesonly=false", then run the search if timechart is populated. If it is populated, summarized data is missing most likely.
3. You can visit Data Model settings and check progress of Data Model Acceleration
(ref: Review summary creation metrics in
http://docs.splunk.com/Documentation/Splunk/6.3.0/Knowledge/Acceleratedatamodels )

0 Karma

nicolay_koecher
Explorer

Hi,

thanks for your answer - but,

in searchstring --> Controller View --> AVG Latency, there is no "summariesonly=true"

| `tstats` avg(read_latency_average),               avg(write_latency_average),               avg(other_latency_average),               from netapp_perf_volume groupby _time span=2m, host  | search  [search `SystemHostname("frainnad1n1")`]  | eval psrsvd_sm_read_latency_average=psrsvd_sm_read_latency_average/1000 | eval psrsvd_sm_write_latency_average=psrsvd_sm_write_latency_average/1000 | eval psrsvd_sm_other_latency_average=psrsvd_sm_other_latency_average/1000 | timechart                avg(read_latency_average) AS "Read Latency",                avg(write_latency_average) AS "Write Latency",               avg(other_latency_average) AS "Other Latency" by host

Result: no result found.

Prior to update to ver 2.1.0 - search is running fine.

Any other ideas

greetings NIK

0 Karma

Masa
Splunk Employee
Splunk Employee

The search string is incorrect for the version 2.1.0. It is supposed to be "from datamodel=NetApp_ONTAP". So, that tells you're using v2.0.3 ontap app view, not v2.1.0. Please review upgrade and make sure all packages TA and app are v2.1.0 first.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...