We are using a Search Head cluster
Splunk Enterprise
Version:
7.2.6
When the CPU and Memory of servers goes high we restart the cluster and the cluster comes back to normal.
I wrote a shell script with 2 lines.
!#/bin/bash
sudo -u splunk /opt/splunk/bin/splunk rolling-restart shcluster-members
when the alert in SH is triggered it is failing as splunk username and passwd needs to be passed to the script manually.
Is there any way I can pass username and password for Splunk in the script to get triggered as per alert.
Hi,
Please try /opt/splunk/bin/splunk rolling-restart shcluster-members -auth 'username:password'
, however hard-coded admin username and password in not good practice from security point of view.