Getting Data In

the pony command

MuS
Legend

Hi Sirs,

this is more a feature request than a question:

why not include a performance test command for indexer (like bonnie++) and call it pony? this way the splunk user could run this test any time he wants from the search box and compare it with older test data to see if the performance on the indexer decreases or increases.

pony test now

regards, Michael

Tags (1)
1 Solution

jbsplunk
Splunk Employee
Splunk Employee

We have found bonnie ++ to be particularly useful in troubleshooting issues where disk performance becomes a bottleneck. While deployment monitor provides metrics that are quite useful, as LCM indicates, it does not go as far as bonnie does with regard to providing statistics on disk IO. We see many cases where disk IO cannot sustain the required 800-100 IOPS, particularly when configured over NFS(not recommended). I will file this as a feature request for you with product management.

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

We have found bonnie ++ to be particularly useful in troubleshooting issues where disk performance becomes a bottleneck. While deployment monitor provides metrics that are quite useful, as LCM indicates, it does not go as far as bonnie does with regard to providing statistics on disk IO. We see many cases where disk IO cannot sustain the required 800-100 IOPS, particularly when configured over NFS(not recommended). I will file this as a feature request for you with product management.

LCM
Contributor

The pony is already alive, but called Deployment Monitor 😉

In Splunk 4.2 you can enable the Deployment Monitor App. There you'll find exactly your needs (comparisons on indexers throughput prev. day/week vs. curr. day/week) and further useful stuff as well.

UI --> Manager --> Apps --> Deployment Monitor

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...