DeviceHealth Input Not Pulling Health Fields #20
Description
Hello,
I'm running into an issue where the cisco_dnac_devicehealth input is sporadically missing the health metrics in most of the events.
{"DeviceName": "xxx", "IpAddress": "xxx", "DeviceFamily": "Switches and Hubs", "Reachability": "Reachable", "ReachabilityFailureReason": "", "ManageErrors": "", "Manageability": "Managed", "MACAddress": "xxx", "DeviceRole": "ACCESS", "ImageVersion": "xxx", "Uptime": "x days, x", "UptimeSeconds": x, "LastUpdated": "2025-04-20 16:31:53", "LastUpdateTime": 1745166713364, "SerialNumber": "x", "DeviceSeries": "Cisco Catalyst 3650 Series Switches", "Platform": "x", "SupportType": "Supported", "AssociatedWLCIP": "", "cisco_dnac_host": "https://x:443"}
Occasionally, after bouncing the app/splunk service we will receive the full event with all fields:
{"DeviceName": "xxx", "IpAddress": "xxx", "DeviceFamily": "Switches and Hubs", "Reachability": "Reachable", "ReachabilityFailureReason": "", "ManageErrors": "", "Manageability": "Managed", "MACAddress": "xxx", "DeviceRole": "ACCESS", "ImageVersion": "xxx", "Uptime": "x days, x", "UptimeSeconds": x, "LastUpdated": "2025-04-20 16:31:53", "LastUpdateTime": 1745166713364, "SerialNumber": "x", "DeviceSeries": "Cisco Catalyst 3650 Series Switches", "Platform": "x", "SupportType": "Supported", "AssociatedWLCIP": "", "HasHealthReport": "True", "OverallHealth": 10, "HealthScore": 10, "IssueCount": 4, "Site": "Global/x", "Location": "Global/x", "InterfaceLinkErrHealth": 10, "CPUUtilization": 5.75, "CPUHealth": 10, "MemoryUtilizationHealth": 10.0, "MemoryUtilization": 48, "InterDeviceLinkAvailHealth": 100, "HasClientCount": "False", "ClientCountRadio0": 0, "ClientCountRadio1": 0, "ClientCountGhz24": 0, "ClientCountGhz50": 0, "HasInterferenceHealth": "False", "InterferenceHealthRadio0": 0, "InterferenceHealthRadio1": 0, "InterferenceHealthGhz24": 0, "InterferenceHealthGhz50": 0, "HasNoiseHealth": "False", "NoiseHealthRadio1": 0, "NoiseHealthGhz50": 0, "NoiseHealthRadio0": 0, "NoiseHealthGhz24": 0, "HasAirQualityHealth": "False", "AirQualityHealthRadio0": 0, "AirQualityHealthRadio1": 0, "AirQualityHealthGhz24": 0, "AirQualityHealthGhz50": 0, "HasUtilization": "False", "UtilizationRadio0": 0, "UtilizationRadio1": 0, "UtilizationGhz24": 0, "UtilizationGhz50": 0, "cisco_dnac_host": "https://x:443"}
I'm running into this issue using App versions 1.0.6 and 1.0.7 and I've tried on Splunk Versions 9.1.0.1, 9.1.1 and 9.2.1. I've also tested against Catalyst Center Version 2.3.7.7-75051 and Version 2.3.5.5-70026