Monitoring Splunk

How do I tell if an indexer is in maintenance mode?

Jason
Motivator

On the CLI of a clustered indexer, what a command I can run (or perhaps a search, if REST needs to be hit) that will tell me if the cluster is in maintenance mode right now or not?

Tags (2)
0 Karma
1 Solution

Jason
Motivator

Figured it out. Maintenance mode is listed as 0 (disabled) or 1 (enabled) in:

$ ./splunk list peer-info
    slave
            base_generation_id:345
            is_registered:1
            last_heartbeat_attempt:0
            maintenance_mode:1
            restart_state:NoRestart
            site:default
            status:Up

View solution in original post

0 Karma

Jason
Motivator

Figured it out. Maintenance mode is listed as 0 (disabled) or 1 (enabled) in:

$ ./splunk list peer-info
    slave
            base_generation_id:345
            is_registered:1
            last_heartbeat_attempt:0
            maintenance_mode:1
            restart_state:NoRestart
            site:default
            status:Up
0 Karma

vasanthmss
Motivator

Hi Jason,

For checking the cluster master status from search peers or the search head run this command from web ui or the command line, (status will be described below 0/1 for the maintenance mode)
web ui

|rest /services/cluster/master/info

command line:

/opt/splunk/bin/splunk search "|rest /services/cluster/master/info"

Go to your cluster master and execute this command, '

./splunk show maintenance-mode

Maintenance mode : 0 indicates maintenance mode is OFF.
Maintenance mode : 1 indicates maintenance mode is ON.
or

login to your cluster master web UI and , settings -> index clustering, there you can see the status.

Thanks,
V

V

Jason
Motivator

I'm on the cli of the indexer, not the cluster master. as indexers aren't search peers of the cluster master, the above rest command won't work. Thanks though.

0 Karma
Get Updates on the Splunk Community!

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...