Data sources troubleshooting
In the case of data retrieval failures for any data source, except for Splunk Observability, you can check this data source's event logs:
- The data source must be added with the direct connection method
- Event logs must be activated in advance for your data source
β Errors upon setting up an integration with Splunk Observabilityβ
Clear the Nobl9 cache in your browser and set up the integration again.
β No data from a data sourceβ
Depending on the budgeting method, "no data" is treated as follows:
- Occurrences: no good and no total events, so there is no effect on the ratio of good to total events.
- Time slices: minutes with no data considered good.
You can troubleshoot this situation in the following ways:
- Verify your authentication credentials.
To verify credentials on the Nobl9 Web, go to Integrations and click Edit on your required data source. - Verify the query.
Itβs a good practice to first apply the query you wrote in a test environment to make sure it returns valid metrics. - Make sure your query returns only one metric and one time series.
- If you apply any filters in the query, it must point to the exact entity you want to observe.
Nobl9 processes only one datasetβthere is no aggregation on the Nobl9 side.
When all the above steps are verified but the SLO still doesn't show any data, review the data source integration log for any errors:
- For the agent connection, examine agent logs
- For the direct connection, check event logs
Useful linksβ
Check Nobl9 features that will help you troubleshoot:
Event logs
Data anomalies detection
Query checker
Nobl9 agent logging