topic Re: restart splunkd remotely in Monitoring Splunk

restart splunkd remotely

a212830 — Thu, 20 Jun 2013 14:16:05 GMT

Hi,

Is there a way (via Splunk cli?) to restart the splunkd process on remote servers?

Re: restart splunkd remotely

alacercogitatus — Thu, 20 Jun 2013 14:20:38 GMT

curl -k -u admin:PASSWORD https://HOSTNAMEREMOTE:8089/services/server/control/restart -X POST

This should work as long as the PASSWORD is NOT the default (mainly for forwarders)

Re: restart splunkd remotely

MartinMcNutt — Thu, 20 Jun 2013 14:34:33 GMT

Powershell Winrm is turning out to be very nice add in my environment (Windows) for managing my servers. I am in the process of setting up 40+ and I used powershell with winrm to manage almost all settings.

When WINRM is up and configured you can use:

(Examples)

Powershell.exe

Invoke-Command -ComputerName $computername { <Command> }

Enter-pssession -computername
Cd Splunk\bin
.\splunk.exe restart
exit-pssession

WINRM with powershell is like telnet for unix. Microsoft finally understands the power of scripting and remote management via the command line.

Re: restart splunkd remotely

Leo — Fri, 01 Nov 2013 19:49:43 GMT

Using Splunk CLI:

splunk _internal call /services/server/control/restart -method POST -uri https://remoteserver:8089 -auth admin:goodpassword

Consider Web Terminal for Splunk app for situations when Splunk CLI or curl are not available.