# collections.conf # # Splunk app KV store collection file # # In distributed mode, replicating the KVstore to indexer is mandatory for auto-lookup [kv_nmon_inventory] replicate = true # Nmon baseline kvstore collections, one collection per performance metric # CPU_ALL, CPU statistics for All OS [kv_nmon_baseline_CPU_ALL] accelerated_fields.kv_nmon_baseline = { "date_wday":1, "local_time":1, "frameID":1, "hostname":1 } # LPAR, AIX Micro-partitions and shared pool CPU statistics [kv_nmon_baseline_LPAR] accelerated_fields.kv_nmon_baseline = { "date_wday":1, "local_time":1, "frameID":1, "hostname":1 } # MEM, Memory statistics for All OS [kv_nmon_baseline_MEM] accelerated_fields.kv_nmon_baseline = { "date_wday":1, "local_time":1, "frameID":1, "hostname":1 } # DISKXFER, Disks I/O per sec statistics [kv_nmon_baseline_DISKXFER] accelerated_fields.kv_nmon_baseline = { "date_wday":1, "local_time":1, "frameID":1, "hostname":1 } # KVstore collection for frameID mapping, must be replicated with indexers for auto lookup # frameID mapping: [kv_nmon_frameID_mapping] replicate = true # Used to store up to 6 previous days of known hosts to the application, to be used for optimization purposes [kv_nmon_hosts_last_7days] # File systems excluding for file systems usage alerting # 3 collections are available: # - nmon_alerting_filesystem_global_exclusion: will be applied for all systems to exclude file systems # - nmon_alerting_filesystem_template_exclusion: will be applied for matched systems to exclude file systems # - nmon_alerting_filesystem_per_server_exclusion: file system exclusion on per server basis [kv_nmon_alerting_filesystem_global_exclusion] replicate = false [kv_nmon_alerting_filesystem_template_exclusion] replicate = false [kv_nmon_alerting_filesystem_per_server_exclusion] replicate = false # Alerting tenplate threshold management # Used to provide template capabilities to define threshold levels for cpu, physical and virtual memory percentage usage [kv_nmon_alerting_threshold_template] replicate = false # Alerting threshold management per server # Used to provide by server capabilities to define threshold levels for cpu, physical and virtual memory percentage usage [kv_nmon_alerting_threshold] replicate = false # Alerting template threshold management for filesystems # Used to provide by server capabilities to define threshold levels for file-systems usage on a per server / file-system basis [kv_nmon_alerting_threshold_template_filesystem] replicate = false # Alerting threshold management per server for filesystems # Used to provide by server capabilities to define threshold levels for file-systems usage on a per server / file-system basis [kv_nmon_alerting_threshold_filesystem] replicate = false