Troubleshoot the Splunk Supporting Add-on for VMware
Here are some common issues in the Splunk Supporting Add-on for VMware and how to resolve them.
Error message: Orphaned scheduled searches
You receive the message:
Splunk has found 3 orphaned searches owned by 1 unique disabled users. Click to view the orphaned scheduled searches. Reassign them to a valid user to re-enable or alternatively disable the searches.
On the dashboards, the dropdowns are not getting populated and It shows a warning related to empty FullHierarchy lookup.
The admin user has been renamed and Splunk no longer detects an "admin" user.
In the Splunk Supporting Add-on for VMware, the admin user is the owner of scheduled saved searches. If Splunk cannot identify a user named "admin," then these saved searches would not be scheduled and don't run. This results in empty lookups, such as the FullHierarchy lookup.
The dashboards affected get dropdown data from the FullHiearchy lookup, which is why they don't populate.
On the search head machine, you can create a new user with the name "admin" and assign the roles admin to this user.
Virtual Machine Snapshots dashboard is not getting populated with the data collected by Splunk Add-on for VMware Metrics
The Virtual Machine Snapshots dashboard isn't populated with data.
The dashboard uses the summarized data present in the VMwareInventory data model, for which data model acceleration must be enabled. The dashboard might not get populated if data model acceleration isn't enabled.
Enable data model acceleration for the VMwareInventory data model. An admin can enable acceleration or change the acceleration period by performing the following steps on the search head:
- On the Splunk menu bar, click Settings > Data models.
- Select Splunk Supporting Add-on for VMware from the App dropdown to see the data models defined and used by the app.
- From the list for data models, click Edit in the Action column of a data model.
- Select Edit Acceleration.
- Check the Accelerate checkbox to enable data model acceleration.
- Select the summary range to specify the acceleration period. The default summary range is one month.
- Click Save.
Dashboard reference for the Splunk Supporting Add-on for VMware
Release Notes for the Splunk Supporting Add-on for VMware
This documentation applies to the following versions of Splunk® Supporting Add-on for VMware: 1.0.0