Carbon Mine is a Splunk Search command that uses Graphites render url api and retrieves raw json data.
This Splunk utilizes requests python modules.
Supports multiple graphite Instances
Proxy support
This version has been test on 6.x and should work on 5.x.
App is known to work on Linux,and Mac OS X, but has not been tested on other operating systems. Window should work
App requires network access to Graphite Server
Miminum of 2 GB RAM and 1.8 GHz CPU.
Graphite 9.x or Higher
Splunk version 6.x or Higher
You can download it Splunk. And see the Splunk documentation for instructions on installing and more.
1) copy repo into $SPLUNK_HOME/etc/apps/.
2) create $SPLUNK_HOME/etc/apps/carbonmin/local/carbonmine.conf.
3) configure [production] stanza with url to graphite instance. Note: if proxy look at README for proxy config.
| carbonmine earliest=-1hour latest=now target=nonNegativeDerivative(.elasticsearch.indices._all.search.query_total)
OR
| carbonmine target=nonNegativeDerivative(.elasticsearch.indices._all.search.query_total)
OR
| carbonmine target=nonNegativeDerivative(*.elasticsearch.indices._all.search.query_total) instance=dev
It is recommend that this be installed on an Search head.
Allows for user to join graphite data with Splunk using a search command.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.