Splunk Technology Add-on
TA-zfspool
Pool integrity
Free for personal use · commercial license required
Storage
zfs-utils (often already present) · mdADM · btrfs-progs
Why TA-zfspool exists
Silent data corruption is caught by scrub and checksum counters that nobody watches by hand. TA-zfspool streams pool state into Splunk so parity failures, stalled resilvers and fragmentation trend before they cost data.
What it collects
- Checksum and scrub error counters
- Resilver status and progress
- Pool fragmentation and MDADM/btrfs parity state
Runs on stock tools
No daemons, no agents, no exotic collectors - it shells out to well-known CLIs or reads sysfs, and parses the result into Splunk events.
External tools used: zfs-utils (often already present) · mdADM · btrfs-progs.