Monitoring Splunk

Is it possible to pull a diag from a Splunk Cloud instance?

hmasten
Explorer

Is it possible to pull diag from a Splunk Cloud instance? or is there some equivalent feature?

Would I be able to use a Heavy Forwarder and the Splunk cli?

Tags (2)
0 Karma

vasanthmss
Motivator

Nope.

Do you have access to the physical server of the Cloud instance, If so then yes otherwise you can raise an support ticket and check with Splunk Support team..

In general you can create diag file from any of the splunk servers by using the below command,

./splunk diag

Run diag on a remote node
If you are not able to SSH into every machine in your deployment, you can still gather diags from full Splunk Enterprise instances, but not from Universal Forwarders.

First, make sure you have the "get-diag" capability. Admin users have this capability. If admin users want to delegate this responsibility, they can give power users the get-diag capability.

You also need login credentials for the remote server.

The syntax is:

splunk diag -uri https://<host>:<mgmtPort>;

For more infor look for http://docs.splunk.com/Documentation/Splunk/6.4.3/Troubleshooting/Generateadiag

Hope this will helps you....

V
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...