Email alert for splunkd failing to start after 3 attempts

[srodier01x]

Good afternoon all

I want to be able to get alerted, through email, when the splunkd service on my heavy forwarders does not start after 3 attempts to start the service (using the bash script and cron schedule at the link below) but how would I go about using sendmail in order to create the alert?

https://www.digitalocean.com/community/tutorials/how-to-use-a-simple-bash-script-to-restart-server-p...

[niketn]

@srodier01x what is the use case of restarting your HF in the first place? You will have data loss while the HF is being restarted.

[Sukisen1981]

check this out - https://answers.splunk.com/answers/242618/how-to-count-the-number-of-times-splunk-is-restart.html