Is it possible to monitor if port 9997 is listening on HWF using Distributed management console (DMC)

[thezero]

Hi Team,

Can we configure distributed management console to monitor if port 9997 is listening on a splunk instance (HWF)? Or is there any other way in splunk to monitor port status ?Please advise.

Regards,
Thezero

[esix_splunk · Accepted solution]

You cant use the DMC to monitor a listening port.

However, what you can do is the Splunk TA for NIX. It has a netstat input in there, and you can use that to monitor for specific open port on host(s).

You could also use this app : https://splunkbase.splunk.com/app/1553/ - Configure an input that runs a netstat command through that also.

Then alert based on those results...