n00badmin / mirage

Mirage is a Cacti plugin designed to mirror SNMP polling data to file.
MIT License
10 stars 1 forks source link

Cacti Mirage - Integration with Splunk #13

Open Lupenio opened 5 years ago

Lupenio commented 5 years ago

Hello, I'm new on Cacti. I'm trying to integrate Cacti with Splunk. The problem is thath in the file mirage_poller_output.log I have ldi = "1582" t = "1543306502" rrdn = "traffic_in" rrdv = "39577340172528"

where 39577340172528 is the "last_ds" and not the "value" of that data source.

How can I have the "value" of the data source and not the "last_ds"? With these values, the charts related to traffic_in and traffic_out are all flat.

Is possible to have good charts also with the "last_ds"?

Thank you

n00badmin commented 5 years ago

Hey Eugenio!

In this version of mirage, we handle calculating the counter deltas using Splunk streamstats command.

In the app on Splunkbase : https://splunkbase.splunk.com/app/3037/ there is a “quick search” dashboard that contains the search logic you’ll want to use.

Once I get a chance I’ll post an example search here, but the jist of it is that for any counter based metrics we will calculate thr delta is Splunk, which will give you the “rate” rather than the raw counter.