Getting Data In

Splunk Monitoring

Path Finder

I want to have a check for Splunk by monitoring it with our monitoring platform.
We recently ran into a windows bug where we run out of server connections. Server is pingable, splunkd/splunk web are both running fine.

can someone provide a more creative way to monitor?

during our bug i noticed that splunk web was unable to populate the login page with proper footer info:

it came up as version unknown. this was one additional way i was considering monitoring it.

Tags (2)
0 Karma

Splunk Employee
Splunk Employee

When you see that version unknown, the splunkweb (UI) process was unable to contact splunkd (Splunk service).

0 Karma

Splunk Employee
Splunk Employee

Are you using the Splunk deployment server while having it be a client of itself? I saw the issue linked below when attempting to do the same:

Super Champion

When you say you ran out of server connections what do you mean?
You say splunk web was running fine, but the page did not fully populate... were you able to log in? Were you on the local system or accessing it from the network?
You said that splunkd was running, but was it working? Were the forwarders able to send data, or were the forwarder logs showing connection errors?

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...