Skip to content
This repository has been archived by the owner before Nov 9, 2022. It is now read-only.


Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?

Latest commit


Git stats


Failed to load latest commit information.
Latest commit message
Commit time

Qumulo App version 2.0.0


The Qumulo Splunk App ( lets Qumulo ( customers use Splunk to view metrics and create alerts about their Qumulo cluster.


Qumulo REST API/ python 2.7 wrapper ( croniter six

Supported Qumulo Core / Cluster versions

The Qumulo Splunk App is verified to work with:

Qumulo 2.0.0 Qumulo 1.3.0 Qumulo 1.2.23 Qumulo 1.2.22 Qumulo 1.2.21

Earlier or later version of Qumulo Core may also work with this version of Qumulo Splunk App but have not been verified with this version.

Open Source Software

Licensed under Educational Community License (ECL) Version 2.0, April 2007

The Educational Community License version 2.0 ("ECL") consists of the Apache 2.0 license, modified to change the scope of the patent grant in section 3 to be specific to the needs of the education communities using this license. The original Apache 2.0 license can be found at:

See project file LICENSE for details and terms

Supported Splunk Versions

Verified with Splunk 6.3


Copy files to $SPLUNK_HOME/etc/apps/qumulo_splunk_app and restart Splunk

Installation and Configuration

You'll need to provide hostname, port number and username and password for an account with access to Qumulo REST API after installing the app.

You can also configure different poll intervals for each endpoint etc.

NOTE that you will need to restart your Splunk server after updating configuration.

Splunk Meta Data

The Qumulo Splunk app creates a new index (qumulo) with three sourcetypes (described below)


Qumulo Splunk App defines three source types:

[qumulo://get_iops] [qumulo://get_capacity] [qumulo://get_throughput]

Distributed deployment

This app is designed to run in context of a Splunk server and communicates via REST with a Qumulo cluster.

Additional declarations


Clicking on 'Qumulo App' on the left-hand side in the Splunk home screen brings you to the default / provided Qumulo dashboard. It can be customized as-needed. By default it shows:

Minimum and Average Free Capacity charts Read and Write Throughput values over time Most Active Client IPs against the cluster, over time

These are suggested metrics to display in the dashboard. By clicking on the Qumulo Splunk App icon, you can search any of the Qumulo metrics and create appropriate dashboard components or alerts or replace the existing dashboard components.

Clicking on 'Search' in the Qumulo Splunk App navigation bar will let you search on any one of IOPs, capacity or throughput.

Clicking on 'Setup' in the Qumulo Splunk App navigation bar will let you set up or edit parameters for the app, enable or disable endpoints, control polling frequency for each of the three REST inputs or view any errors that have occurred within the Qumulo Splunk App.


Any log entries/errors will get written to $SPLUNK_HOME/var/log/splunk/splunkd.log


Clicking on 'Manage/ Qumulo Splunk App Errors' in the Qumulo Splunk App navigation bar will show any errors that have occurred while running the Qumulo Splunk App; Errors can be queried and filtered just like any other data in Spllunk.

Contact and Support

Support hours (at least 8 hours a day, 5 days a week) How to get support (email, website, phone): Michael Murray 855 4-QUMULO (855.478.6856)

Issues with this application are tracked using GitHub issues on the associated project, which you can find here:


A Splunk integration app that pulls capacity, throughput and other data from a Qumulo cluster






No packages published