Splunk Technology Add-on
TA-sanpath
Storage paths
Free for personal use · commercial license required
Storage
multipath-tools · sysfs · iscsiadm
Why TA-sanpath exists
Intermittent "sometimes slow" storage pain lives in the path layer. TA-sanpath captures flaps, session drops and ALUA flips with timestamps so path problems get matched to application impact.
What it collects
- multipathd path state changes
- Fibre Channel and iSCSI session loss
- ALUA transitions and queue-full events
Runs on stock tools
No daemons, no agents, no exotic collectors - it shells out to well-known CLIs or reads sysfs, and parses the result into Splunk events.
External tools used: multipath-tools · sysfs · iscsiadm.