Splunk Daemon and Solarwinds

[mysicksi]

Hi everyone,

We are looking into the possibility of another way to monitor the Splunk universal forwarders on our servers, besides within the search head or deployment server. One idea raised was utilizing Solar winds to monitor the UF process. I believe the only process that would need to be monitored for Linux would be the Splunk daemon or are there other dependencies that should be monitored as well?

Thank you for your time!

[vliggio · Accepted solution]

The only thing you need to monitor is splunkd. It is the parent process for everything that splunk UF will do. There are of course sub processes that might run such as python, but without splunkd the UF won't be working.

[mysicksi]

Thank you!