You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

88 lines
2.5 KiB

# inputs.conf
######
# main
######
# The metricator_helper.sh performs nmon binary starting if required
# by default, the script is executed every 60 seconds and will not perform any action if
# the nmon binary is started
[script://./bin/metricator_helper.sh]
disabled = false
index = os-unix-nmon-internal
interval = 60
source = nmon_collect
sourcetype = nmon_collect
# The metricator_consumer.sh script consumes nmon data produced in fifo mode
[script://./bin/metricator_consumer.sh]
disabled = false
index = os-unix-nmon-internal
interval = 60
source = fifo_consumer
sourcetype = nmon_processing
# Example of configuration for cold data processing
# [monitor://$SPLUNK_HOME/var/log/metricator/var/nmon_repository/*.nmon]
# disabled = false
# followTail = 0
# index = os-unix-nmon-internal
# sourcetype = nmon_processing
# crcSalt = <SOURCE>
##############
# nmon metrics
##############
# nmon metrics stored as native metrics
[batch://$SPLUNK_HOME/var/log/metricator/var/csv_repository/*metrics.csv]
disabled = false
move_policy = sinkhole
index = os-unix-nmon-metrics
sourcetype = nmon_metrics_csv
# source override: to prevent Metadata from having millions of entry, the source is overridden by default
# You can disable this for trouble shooting purposes if required
source = nmon_perfdata_metrics
# nmon data stored as regular events
[batch://$SPLUNK_HOME/var/log/metricator/var/csv_repository/*events.csv]
disabled = false
move_policy = sinkhole
index = os-unix-nmon-events
sourcetype = nmon_data
# source override: to prevent Metadata from having millions of entry, the source is overridden by default
# You can disable this for trouble shooting purposes if required
source = nmon_perfdata_events
#############
# nmon config
#############
# Files are monitored using regular file monitor to avoid risk of data duplication
# Cleaning will be achieved by nmon_cleaner jobs
[monitor://$SPLUNK_HOME/var/log/metricator/var/config_repository/*events.csv]
disabled = false
index = os-unix-nmon-config
sourcetype = nmon_config
# source override: to prevent Metadata from having millions of entry, the source is overridden by default
# You can disable this for trouble shooting purposes if required
source = configdata
##############
# nmon cleaner
##############
# The metricator_cleaner.sh script performs cleaning tasks internal to the TA, scheduled once a day
[script://./bin/metricator_cleaner.sh --cleancsv]
disabled = false
index = os-unix-nmon-internal
interval = 14400
source = nmon_cleaner
sourcetype = nmon_clean