Splunk® IT Service Intelligence

Modules

Splunk IT Service Intelligence (ITSI) version 4.11.x reached its End of Life on December 6, 2023. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see Before you upgrade IT Service Intelligence.
This documentation does not apply to the most recent version of Splunk® IT Service Intelligence. For documentation on the most recent version, go to the latest release.

Storage Module data model reference table

Use the below tables as a reference for the data models of this module. The tables contain a breakdown of the required tags for the event objects or searches in that model, and a listing of all extracted and calculated fields included in the model. Data models can be edited by navigating to Settings > Data models

For information on how to map your data to the data models available in the Splunk IT Service Intelligence Modules, see the below links:

Tags used with event objects

The following tags act as constraints to identify your events as being relevant to this data model.

Object name Tag name
Inventory storagesystem, inventory
|____ Storage Array Information
storagearray
|____ Storage Pool Information
storagepool
|____ Volume Information
volume
|____ LUN Information
lun
|____ Disk_Information
disk

Fields for Storage event objects

The following table lists the extracted and calculated fields for the event objects in the model. Note that it does not include any inherited fields.

Object name Field name Data type Description
Inventory array_id string Unique identifier for storage array
Inventory pool_id string Unique identifier for storage pool
Inventory pool_name string Storage pool name
Inventory storage_capacity number Storage capacity in bytes
Inventory vendor string Vendor name of the storage array or disk
Inventory vendor_product string Vendor given official name for storage array or disk
Inventory volume_id string Unique identifier for volume
Inventory volume_name string Volume name
Inventory role string role
Storage Array Information array_name string The storage array name
Storage Array Information array_type string Type of Storage Array either Storage Area Network (SAN) or Network Attached Storage (NAS)
Storage Array Information controller_mode string Storage array controller operation mode
Storage Array Information ip string Storage Array controller IP address
Storage Array Information logical_cpu_count number Total number of logical processors
Storage Array Information mem_capacity number Total memory capacity in bytes
Storage Array Information os string Storage array operating system
Storage Pool Information storage_used number The used amount of storage capacity reported by the resource, in bytes
LUN Information accessible string Status of LUN if it is available for access or not
LUN Information lun_id string Unique identifier for LUN
LUN Information lun_name string LUN (Logical Unit Number) name
LUN Information lun_path string LUN identifier path
LUN Information serial string Serial number for the LUN
Disk_Information disk_id string Unique identifier of Disk
Disk_Information disk_name string Disk name
Disk_Information disk_type string Type of disk
Disk_Information raid_group string The raid group in which disk is present



Object name Tag name
Performance storagesystem, performance
|____ Storage Array
storagearray
|____ Storage Pool
storagepool
|____ Volume
volume
|____ LUN
lun
|____ Disk
disk
Object name Field name Data type Description
Performance io_ops number The total number of IO operations processed by the resource
Performance latency number The latency reported by the resource, in milliseconds
Performance read_latency number The latency of read operations, in milliseconds
Performance read_ops number The total number of read operations processed by the resource
Performance storage_read_throughput number The current read throughput reported by the service, in kbps
Performance storage_write_throughput number The current write throughput reported by the service, in kbps
Performance write_latency number The latency of write operations, in milliseconds
Performance write_ops number The total number of write operations processed by the resource
Storage Array array_id string Unique identifier for storage array
Storage Array cpu_load_percent number CPU load in percentage
Storage Array network_usage_in number The received data rate of the network
Storage Array network_usage_out number The transmitted data rate of the network
Storage Pool pool_id string Unique identifier for storage pool
Storage Pool storage_used_percent number Storage usage of storage pool, in percentage
Volume volume_id string Unique identifier for volume
LUN lun_id string Unique identifier for LUN
Disk disk_id string Unique identifier for disk
Disk read_blocks number Number of blocks read
Disk write_blocks number The number of blocks written by the resource
Last modified on 28 April, 2023
Storage Module entities attributes   Storage Module troubleshooting

This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.5, 4.11.6, 4.12.0 Cloud only, 4.12.1 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3, 4.16.0 Cloud only, 4.17.0, 4.17.1, 4.18.0, 4.18.1


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters