Hi ,
Please help me with the search to setup the alert
If Indexer or search head goes down in the cluster.
Thanks
Hi,
Can you try below searches:
For indexer cluster :
| rest /services/cluster/master/peers | table label status | where status!="Up"
For Search head cluster:
| rest /services/shcluster/captain/members/ | table label status | where status!="Up"
Hi,
Can you try below searches:
For indexer cluster :
| rest /services/cluster/master/peers | table label status | where status!="Up"
For Search head cluster:
| rest /services/shcluster/captain/members/ | table label status | where status!="Up"