Splunk® App for NetApp Data ONTAP (Legacy)

Deploy and Use the Splunk App for NetApp Data ONTAP

This documentation does not apply to the most recent version of Splunk® App for NetApp Data ONTAP (Legacy). For documentation on the most recent version, go to the latest release.

Settings dashboards

ONTAP Collection Configuration Dashboard

The collection configuration dashboard is now included as part of the Splunk Add-on for NetApp Data ONTAP. See the reference tables section of the Splunk Add-on for NetApp Data ONTAP manual.

App Data Volume

This dashboard gives you information about the quantity and types of data you are collecting in the app. You can get a quick view of the total volume of data created by the app.

The Dashboard shows:

  • the total data volume over the last 24 hours.
  • the breakdown of data into datatype and unique sourcetypes for each NetApp data source.
Panel Description
Overall Data Volume, over the last 24 hours This is the total volume of data indexed over the time period specified. The following search powers the panel:
  • Search: index=_internal source=*metrics.log group="per_sourcetype_thruput" series=ontap:* earliest=-24h latest=now | stats sum(kb) as totKb by series | eval totB=totKb*1024 | stats sum(totB) as totB | eval totB=`format_bytes(totB)`
  • Sourcetype that must be present for the view to populate: All of the ontap sourcetypes must be present.
Detailed Data Volume, over the last 24 hours This table displays the volume of data indexed for each individual NetApp datatype. The following search powers the panel:
  • Search: index=_internal source=*metrics.log group="per_sourcetype_thruput" series=ontap:* earliest=-24h latest=now | stats sum(kb) as totKb by series | eval totB=totKb*1024| eval formatted_bytes=`format_bytes(totB)` | rex field="series" "^ontap:(?<Datatype>[^:]+):?.*$" | stats list(series) as "Unique Sourcetypes" list(formatted_bytes) as "Volume per Sourcetype" sum(totB) as totB by Datatype | eval "Total Volume"=`format_bytes(totB)` | table Datatype, "Unique Sourcetypes", "Volume per Sourcetype", "Total Volume"
  • Sourcetype that must be present for the view to populate: All of the ontap sourcetypes must be present.
Last modified on 16 December, 2016
Reports   Correlate NetApp and VMware data

This documentation applies to the following versions of Splunk® App for NetApp Data ONTAP (Legacy): 2.1.5


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters