Storage Module data model reference table
Use the below tables as a reference for the data models of this module. The tables contain a breakdown of the required tags for the event objects or searches in that model, and a listing of all extracted and calculated fields included in the model. Data models can be edited by navigating to Settings > Data models
For information on how to map your data to the data models available in the Splunk IT Service Intelligence Modules, see the below links:
- How to use these reference tables in the Common Information Model Add-on Manual.
- About data models in the Splunk Enterprise Knowledge Manager Manual.
Tags used with event objects
The following tags act as constraints to identify your events as being relevant to this data model.
Object name | Tag name |
---|---|
Inventory | storagesystem, inventory |
|
storagearray |
|
storagepool |
|
volume |
|
lun |
|
disk |
Fields for Storage event objects
The following table lists the extracted and calculated fields for the event objects in the model. Note that it does not include any inherited fields.
Object name | Field name | Data type | Description |
---|---|---|---|
Inventory | array_id
|
string | Unique identifier for storage array |
Inventory | pool_id
|
string | Unique identifier for storage pool |
Inventory | pool_name
|
string | Storage pool name |
Inventory | storage_capacity
|
number | Storage capacity in bytes |
Inventory | vendor
|
string | Vendor name of the storage array or disk |
Inventory | vendor_product
|
string | Vendor given official name for storage array or disk |
Inventory | volume_id
|
string | Unique identifier for volume |
Inventory | volume_name
|
string | Volume name |
Inventory | role
|
string | role |
Storage Array Information | array_name
|
string | The storage array name |
Storage Array Information | array_type
|
string | Type of Storage Array either Storage Area Network (SAN) or Network Attached Storage (NAS) |
Storage Array Information | controller_mode
|
string | Storage array controller operation mode |
Storage Array Information | ip
|
string | Storage Array controller IP address |
Storage Array Information | logical_cpu_count
|
number | Total number of logical processors |
Storage Array Information | mem_capacity
|
number | Total memory capacity in bytes |
Storage Array Information | os
|
string | Storage array operating system |
Storage Pool Information | storage_used
|
number | The used amount of storage capacity reported by the resource, in bytes |
LUN Information | accessible
|
string | Status of LUN if it is available for access or not |
LUN Information | lun_id
|
string | Unique identifier for LUN |
LUN Information | lun_name
|
string | LUN (Logical Unit Number) name |
LUN Information | lun_path
|
string | LUN identifier path |
LUN Information | serial
|
string | Serial number for the LUN |
Disk_Information | disk_id
|
string | Unique identifier of Disk |
Disk_Information | disk_name
|
string | Disk name |
Disk_Information | disk_type
|
string | Type of disk |
Disk_Information | raid_group
|
string | The raid group in which disk is present |
Object name | Tag name |
---|---|
Performance | storagesystem, performance |
|
storagearray |
|
storagepool |
|
volume |
|
lun |
|
disk |
Object name | Field name | Data type | Description |
---|---|---|---|
Performance | io_ops
|
number | The total number of IO operations processed by the resource |
Performance | latency
|
number | The latency reported by the resource, in milliseconds |
Performance | read_latency
|
number | The latency of read operations, in milliseconds |
Performance | read_ops
|
number | The total number of read operations processed by the resource |
Performance | storage_read_throughput
|
number | The current read throughput reported by the service, in kbps |
Performance | storage_write_throughput
|
number | The current write throughput reported by the service, in kbps |
Performance | write_latency
|
number | The latency of write operations, in milliseconds |
Performance | write_ops
|
number | The total number of write operations processed by the resource |
Storage Array | array_id
|
string | Unique identifier for storage array |
Storage Array | cpu_load_percent
|
number | CPU load in percentage |
Storage Array | network_usage_in
|
number | The received data rate of the network |
Storage Array | network_usage_out
|
number | The transmitted data rate of the network |
Storage Pool | pool_id
|
string | Unique identifier for storage pool |
Storage Pool | storage_used_percent
|
number | Storage usage of storage pool, in percentage |
Volume | volume_id
|
string | Unique identifier for volume |
LUN | lun_id
|
string | Unique identifier for LUN |
Disk | disk_id
|
string | Unique identifier for disk |
Disk | read_blocks
|
number | Number of blocks read |
Disk | write_blocks
|
number | The number of blocks written by the resource |
Storage Module entities attributes | Storage Module troubleshooting |
This documentation applies to the following versions of Splunk® IT Service Intelligence: 4.11.0, 4.11.1, 4.11.2, 4.11.3, 4.11.4, 4.11.5, 4.11.6, 4.12.0 Cloud only, 4.12.1 Cloud only, 4.12.2 Cloud only, 4.13.0, 4.13.1, 4.13.2, 4.13.3, 4.14.0 Cloud only, 4.14.1 Cloud only, 4.14.2 Cloud only, 4.15.0, 4.15.1, 4.15.2, 4.15.3, 4.16.0 Cloud only, 4.17.0, 4.17.1, 4.18.0, 4.18.1
Feedback submitted, thanks!