Skip to main content

Integrations

Data Collection Not Working

After installing the application, all dashboards should start populating data. If you don’t see data in the dashboards, use the following steps for troubleshooting:

  • If you specified a non-default index in the Data Input, confirm that you have modified the `illumio_get_index` macro with indexes selected while creating Data Inputs (Modular inputs) and that you have modified the Advanced search for either the default index or your custom index. See Index, Source, and Source Types.

  • Run the following query to verify that data is being indexed into Splunk:

    search `illumio_get_index` | stats count by sourcetype

  • Verify that SPLUNK_HOME is pointing to the correct Splunk directory.

  • Look for errors in the ta-illumio.log file. This file is in the $SPLUNK_HOME/var/log/TA-Illumio/ folder.

  • Check to see whether the selected time range covers the time when the traffic flow summaries were generated.

  • If data model acceleration is disabled, graphs will not display. Enable data model acceleration. See Accelerate Data Model.