Getting Data In

how to get list of search peers via rest api

Contributor

I can't seem to find the list of indexer nodes (search peers) through the rest api on the search head.

any ideas?

its v 4.1

1 Solution

Splunk Employee
Splunk Employee

Unsupported and undocumented, but there is an endpoint here: https://localhost:8489/services/search/distributed/peers, and here: https://localhost:8489/servicesNS/admin/-/search/distributed/peers

In general, you could go via the Splunk Manager UI to the admin page that lists out the items you're looking for, and see what URLs get hit in the splunkd_access.log file.

View solution in original post

Splunk Employee
Splunk Employee

If you are running Splunk 4.3 or higher, you can rely on the rest search command to obtain this list:

| rest /services/server/info | table splunk_server

Note that the following search will list all peers responding to distributed search but also the local search-head.

Splunk Employee
Splunk Employee

Unsupported and undocumented, but there is an endpoint here: https://localhost:8489/services/search/distributed/peers, and here: https://localhost:8489/servicesNS/admin/-/search/distributed/peers

In general, you could go via the Splunk Manager UI to the admin page that lists out the items you're looking for, and see what URLs get hit in the splunkd_access.log file.

View solution in original post