Skip to Content.
Sympa Menu

perfsonar-user - Re: [perfsonar-user] perfSonar Results in Splunk

Subject: perfSONAR User Q&A and Other Discussion

List archive

Re: [perfsonar-user] perfSonar Results in Splunk


Chronological Thread 
  • From: Tom Throckmorton <>
  • To: Daniel Doyle <>
  • Cc: "Manglos, Andrew P (173E)" <>, "" <>, "" <>
  • Subject: Re: [perfsonar-user] perfSonar Results in Splunk
  • Date: Mon, 6 Jul 2015 23:57:40 -0400

Hey Dan,

On Mon, Jul 6, 2015 at 2:20 PM, Daniel Doyle <> wrote:
Andrew,

As someone not overly familiar with Splunk, I believe it's just a log indexer and searcher vs a data storage engine. I guess you could formulate the results of a pS test into some standardized log message and then upload that using whatever APIs or mechanism Splunk allows for.

It can certainly index logs (that is the primary input method) and that is the most straightforward, but there are more than a few other ways to get data in.
 

I don't know offhand if there is a way to hook into the pS "live" results and there's nothing natively in pS that integrates with Splunk (to my knowledge), but you could write something that ran out of cron or as a daemon or something and periodically polled Esmond for data that was within the last few minutes. Then crunch it down into the log message format you want, and then send that over to Splunk.


The output from that is already JSON, which Splunk can be taught to understand as-is.
 

There are python and perl libraries available to make crawling Esmond easier, so with some elbow grease this wouldn't take much to knock out I think. It might be cool to share back with the community if you chase this route too!

+1

cheers,

-tt
 

-Dan

On Jul 1, 2015, at 10:58 AM, Manglos, Andrew P (173E) <> wrote:

Hello,
 
I was wondering if anyone knows how to forward testing results in perfSonar to Splunk?

Dan Doyle
GlobalNOC Software Developer







Archive powered by MHonArc 2.6.16.

Top of Page