Skip to content

Diagnosability tooling for Splunk, primarily targeted at Universal Forwarders and platforms without support for RapidDiag

License

Notifications You must be signed in to change notification settings

splunk/uf-diagnosability

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Splunk UF Diagnosability tooling

Diagnosability tooling targeted primarily at Splunk Universal Forwarders and Splunk Enterprise in platforms without support for RapidDiag.

collect-stacks.sh (only for Linux)

Collect stack dumps from a process using eu-stack (from the elfutils package). Also collects basic info from /proc/PID to match.

Preferably run it as root so it can also collect kernel-side stack traces, otherwise it won't be able to collect kernel traces: access to that requires root since Linux kernel version 2.6.29.

Documentation: via ./collect-stacks.sh -h

splunk-search-trigger.py

Triggers commands when a search matching a regular expression starts running (think start pstack collection on any searches running on index=whatever, or requesting the dummy field PSTACKME). See examples from the script's help for nice usage ideas.

Documentation: via ./splunk-search-trigger.py -h

About

Diagnosability tooling for Splunk, primarily targeted at Universal Forwarders and platforms without support for RapidDiag

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published