Collectd Notes.md

Collectd is used to tracking hard drive space and cpu usage. The data is collectd on the servers and sent to the Moose indexers via HEC.

How do i search the data in Splunk?

05/08/2020

| mstats count WHERE index=collectd metric_name=* by host, metric_name

Junk in syslog

Currently a bug in collectd where it writes the response from HEC into the system log /var/log/messages. There's a github issue, https://github.com/collectd/collectd/issues/3105. Duane has a PR in to fix it, in theory - https://github.com/collectd/collectd/pull/3263