Deployment Architecture

Looking for a URL/API to configure on load balancer for SH healthcheck?

SunilkumarG
Engager

Hi Folks,

we would like Load balancer to check Splunk search head health before redirecting.

Could you please share the URL that be configured on load balancer?

looking at using /debug/echo?ping=OK and parsing for the OK, but that is less than optimal as debug has to be set in web.conf Please suggest an alternative.

Labels (2)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

we are using this with LB:s (e.g. F5 or AWS ALB).

http(s)://<server>:<web port>/en-US/account/login?return_to=%2Fen-US%2F

It don't need authentication and it tells if splunk's web interface is up and accepting requests.

 

r. Ismo

View solution in original post

isoutamo
SplunkTrust
SplunkTrust

Hi

we are using this with LB:s (e.g. F5 or AWS ALB).

http(s)://<server>:<web port>/en-US/account/login?return_to=%2Fen-US%2F

It don't need authentication and it tells if splunk's web interface is up and accepting requests.

 

r. Ismo

esix_splunk
Splunk Employee
Splunk Employee

You can use the Health Check API for this. You should be able to check this endpoint : 

https://<host>:8089/services/server/health/splunkd

Here's some more information on this : https://docs.splunk.com/Documentation/Splunk/8.0.4/DMC/Usefeaturemonitoring

 

Cheers

Eric 

Chance
Observer

AFAIK the health check API requires auth and there is no way to add auth headers to an AWS LB health check

0 Karma

isoutamo
SplunkTrust
SplunkTrust
This is the reason why I use login url.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...