I need a info whether there is a way to achieve this.
I forward all the monitoring details for processes from a unix server A, to splunk. The events/data is used to create a dashboard.
To see details, the dashboard servers the purpose. Suppose in the dashboard a process is showing as STOPPED. Can I add a button to again restart the process.
Currently when the process is down , I restart using a unix script, I wish to call the same script from a dash board button.
ANy suggestion if there is something in splunk to support this, or may be any other alternative?
You could make use of the REST API to have a cron job on each server search your Splunk instance for its own status, and perform the restart if necessary.