This repository has been archived by the owner on Aug 28, 2021. It is now read-only.
-
Notifications
You must be signed in to change notification settings - Fork 13
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
d056eca
commit 0e0aa00
Showing
4 changed files
with
49 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,48 @@ | ||
################ | ||
Eventgen testing | ||
################ | ||
|
||
Testing Nmon performance with evengen | ||
===================================== | ||
|
||
**Splunk Evengen is a pretty good and straightforward way to test the application** | ||
|
||
Starting the TA-nmon version 1.3.28 and TA-nmon-hec version 1.3.32, we provide sample data for 2 AIX and 2 Linux servers. | ||
The data has been generated on IBM Power Development Cloud servers. | ||
|
||
Finally, we use to run a system stress tool on 1 server of each category, such that you will have quickly active alerts and system statistic anomalies. | ||
|
||
**Evengen will generate data for:** | ||
|
||
* performance metrics (sourcetype=nmon_data / eventtype=nmon:performance) | ||
* configuration data (sourcetype=nmon_config / eventtype-nmon:config) | ||
|
||
Additional data normally available within the application is related to the nmon data collection and will not be generated by Eventgen. | ||
|
||
Get it working in 30 seconds | ||
============================ | ||
|
||
* Have a Splunk instance up and running | ||
* Download the current eventgen version from https://github.com/splunk/eventgen | ||
* Install the eventgen application, you should name the application directory as: | ||
|
||
:: | ||
|
||
$SPLUNK_HOME/etc/apps/SA-Eventgen | ||
|
||
* If not done already, install the Nmon Performance application (obvious!) | ||
* Install either the TA-nmon or the TA-nmon-hec on this instance | ||
* Create an index called "nmon" | ||
* Restart Splunk | ||
|
||
**Immediately after Splunk restart, eventgen starts to generate nmon data, as visible from the application home page:** | ||
|
||
.. image:: img/eventgen_testing.png | ||
:alt: eventgen_testing.png | ||
:align: center | ||
|
||
**Example of a server running with abnormal load:** | ||
|
||
.. image:: img/eventgen_testing2.png | ||
:alt: eventgen_testing2.png | ||
:align: center |
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters