Knowledge Management

Troubleshooting Splunk

mjlsnombrado
Communicator

Hi everyone

Can I ask for useful troubleshooting commands for example restart of services, licenses check, etc ?

Thanks in advance 🙂

0 Karma
1 Solution

vijithv
Explorer

Hi, the basic commands that help to start off splunk are,

splunk help - display usage summary

splunk help display the details of a specific object

splunk [start | stop | restart] - Start, stop and restart splunk
splunk start --accept-license - automatically accept the license without prompt
splunk status -display the splunk process status
splunk show splunkd-port - show the port that the splunkd listens on
splunk show web-port - show the port that splunk web listens on
splunk show servername - show the servername of this instance
splunk show default-hostname - show the default host name used for all data inputs

and this below link have the reference to CLI commands for troubleshooting
http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/CommandlinetoolsforusewithSupport

View solution in original post

0 Karma

vijithv
Explorer

Hi, the basic commands that help to start off splunk are,

splunk help - display usage summary

splunk help display the details of a specific object

splunk [start | stop | restart] - Start, stop and restart splunk
splunk start --accept-license - automatically accept the license without prompt
splunk status -display the splunk process status
splunk show splunkd-port - show the port that the splunkd listens on
splunk show web-port - show the port that splunk web listens on
splunk show servername - show the servername of this instance
splunk show default-hostname - show the default host name used for all data inputs

and this below link have the reference to CLI commands for troubleshooting
http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/CommandlinetoolsforusewithSupport

0 Karma

mjlsnombrado
Communicator

Thanks for the help 🙂

0 Karma

deepashri_123
Motivator

Hey@mjlsnombrado,

You can use btool command to check configuration files that are being used.
You can refer these documents for further reference:
http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/Usebtooltotroubleshootconfiguratio...
http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/IntrototroubleshootingSplunk
Let me know if this helps!!

0 Karma

mjlsnombrado
Communicator

It helps thanks 🙂

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...