I've got an AIX lab machine forwarding data to my Splunk server running the *Nix for Unix and Linux addon. I am receiving data but I am noticing that Splunk thinks my cpu is flatlined at 100% usage constantly.
I know this is not true. I've double checked other monitoring tools and this is a lab machine with no active applications running (Other than the Splunk Forwarder). Is this a known issue or is there a fix?
Initially, I thought maybe there was a discrepancy between sar on Linux and AIX (I saw that cpu.sh in the *Nix app is collecting cpu data that way)