All Apps and Add-ons

REST and WEBSITE Monitoring DATA Visible after Splunk Service Restart

sarvesh_11
Communicator

Hello Folks!

we have configured the alerts for Website and REST API monitoring, nowadays very frequently it happens, we are unable to get the data for Website and REST, and once we restart the splunk services on search head the data is visible of the missing period also?

Q1. I am yet not clear with the data flow of these types (Website and REST), is it Search Head to Indexer and then again Indexer to Searchhead?

Q2. I am not getting any warning message on UI no error in the logs file. but once i restart splunk services the data appears in usual manner and more interestingly for the missing period too.

Thanks in Advance 🙂

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...