Alerting

Email alert for splunkd failing to start after 3 attempts

New Member

Good afternoon all

I want to be able to get alerted, through email, when the splunkd service on my heavy forwarders does not start after 3 attempts to start the service (using the bash script and cron schedule at the link below) but how would I go about using sendmail in order to create the alert?

https://www.digitalocean.com/community/tutorials/how-to-use-a-simple-bash-script-to-restart-server-p...

0 Karma

SplunkTrust
SplunkTrust

@srodier01x what is the use case of restarting your HF in the first place? You will have data loss while the HF is being restarted.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

Champion
0 Karma