topic search query in-order to find a Rest API down in Alerting

search query in-order to find a Rest API down

geethujosey — Wed, 01 Aug 2018 11:48:23 GMT

I have a requirement to write a search query when the REST API got down and need to send an email alert for the same. Can anyone help me to do the search query as i am new to splunk.

Re: search query in-order to find a Rest API down

renjith_nair — Wed, 01 Aug 2018 13:59:49 GMT

Do you have the events of "down" in splunk or do you need to explicitly call the rest endpoint to see if it works?

Re: search query in-order to find a Rest API down

geethujosey — Thu, 02 Aug 2018 09:43:29 GMT

Hi renjith, need to explicitly call the rest endpoint to see if it works?

Re: search query in-order to find a Rest API down

renjith_nair — Thu, 02 Aug 2018 15:01:57 GMT

You could use https://splunkbase.splunk.com/app/1546/ and forward the result to Splunk. Once this is done, you could search the splunk events, you could look for unexpected errors and alert