Qumulo REST API/ python 2.7 wrapper (https://pypi.python.org/pypi?%3Aaction=pkg_edit&name=qumulo_api)
The Qumulo Splunk App is verified to work with:
Earlier or later version of Qumulo Core may also work with this version of Qumulo Splunk App but have not been
verified with this version.
Licensed under Educational Community License (ECL) Version 2.0, April 2007
The Educational Community License version 2.0 ("ECL") consists of the Apache 2.0 license, modified to change
the scope of the patent grant in section 3 to be specific to the needs of the education communities using this license.
The original Apache 2.0 license can be found at: http://www.apache.org/licenses/LICENSE-2.0
See project file LICENSE for details and terms
Verified with Splunk 6.3
Copy files to $SPLUNK_HOME/etc/apps/qumulo_splunk_app and restart Splunk
You'll need to provide hostname, port number and username and password for an account
with access to Qumulo REST API after installing the app.
You can also configure different poll intervals for each endpoint etc.
NOTE that you will need to restart your Splunk server after updating configuration.
The Qumulo Splunk app creates a new index (qumulo) with three sourcetypes (described below)
Qumulo Splunk App defines three source types:
This app is designed to run in context of a Splunk server and communicates via REST
with a Qumulo cluster.
Clicking on 'Qumulo App' on the left-hand side in the Splunk home screen brings you to the default / provided
Qumulo dashboard. It can be customized as-needed. By default it shows:
Minimum and Average Free Capacity charts
Read and Write Throughput values over time
Most Active Client IPs against the cluster, over time
These are suggested metrics to display in the dashboard. By clicking on the Qumulo Splunk App icon, you can search
any of the Qumulo metrics and create appropriate dashboard components or alerts or replace the existing dashboard
Clicking on 'Search' in the Qumulo Splunk App navigation bar will let you search on any one of IOPs, capacity or
Clicking on 'Setup' in the Qumulo Splunk App navigation bar will let you set up or edit parameters for the app,
enable or disable endpoints, control polling frequency for each of the three REST inputs or view any errors
that have occurred within the Qumulo Splunk App.
Any log entries/errors will get written to $SPLUNK_HOME/var/log/splunk/splunkd.log
Clicking on 'Manage/ Qumulo Splunk App Errors' in the Qumulo Splunk App navigation bar will show any errors that
have occurred while running the Qumulo Splunk App; Errors can be queried and filtered just like any other data in
Issues with this application are tracked using GitHub issues on the associated project, which
you can find here:
removes logging of credentials from qumulo_client per CR
updated to pick up credentials from Splunk encrypted storage
updated to Qumulo 2.1.5 REST API
version 2.0.5 -- fixes some security certification issues identified by Splunk
re-added endpoint_to_poll to scheme generation.
GH version is here:
removed unused Advanced XML template per cert.
GitHub change: https://github.com/Qumulo/qumulo_splunk_app/commit/199082f5963443f688031d2ace8a835d4771eb56
fixes some Splunk certification issues
works with Qumulo 2.0.4.
Fixes polling issue (thanks Splunk cert folk!)
GitHub version is here: https://github.com/Qumulo/qumulo_splunk_app/commit/4aee15a0135c2e46c497a0ef11be5f02aa117088
Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.