Can we configure distributed management console to monitor if port 9997 is listening on a splunk instance (HWF)? Or is there any other way in splunk to monitor port status ?Please advise.
You cant use the DMC to monitor a listening port.
However, what you can do is the Splunk TA for NIX. It has a netstat input in there, and you can use that to monitor for specific open port on host(s).
You could also use this app : https://splunkbase.splunk.com/app/1553/ - Configure an input that runs a netstat command through that also.
Then alert based on those results...
View solution in original post