Getting Data In

how to get list of search peers via rest api

hiddenkirby
Contributor

I can't seem to find the list of indexer nodes (search peers) through the rest api on the search head.

any ideas?

its v 4.1

1 Solution

gkanapathy
Splunk Employee
Splunk Employee

Unsupported and undocumented, but there is an endpoint here: https://localhost:8489/services/search/distributed/peers, and here: https://localhost:8489/servicesNS/admin/-/search/distributed/peers

In general, you could go via the Splunk Manager UI to the admin page that lists out the items you're looking for, and see what URLs get hit in the splunkd_access.log file.

View solution in original post

hexx
Splunk Employee
Splunk Employee

If you are running Splunk 4.3 or higher, you can rely on the rest search command to obtain this list:

| rest /services/server/info | table splunk_server

Note that the following search will list all peers responding to distributed search but also the local search-head.

gkanapathy
Splunk Employee
Splunk Employee

Unsupported and undocumented, but there is an endpoint here: https://localhost:8489/services/search/distributed/peers, and here: https://localhost:8489/servicesNS/admin/-/search/distributed/peers

In general, you could go via the Splunk Manager UI to the admin page that lists out the items you're looking for, and see what URLs get hit in the splunkd_access.log file.

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...