Monitoring Splunk

Measuring Splunkd Uptime

rgilliam01
New Member

Looking for a way to measure splunkd service uptime, and alert on when it's down. Not so much worried about system uptime itself, just want to look at measuring splunkd uptime.

0 Karma

woodcock
Esteemed Legend

You can run this search on your most widely peered Search Head (usually your Monitoring Console) and then check the responding peers against a splunk_infrastructure_hosts.csv lookup and then alert if any are not showing:

|rest/services/server/info

lloydknight
Builder

If your splunk is running on Unix systems, try installing the unix and linux add-on app then enable the script that captures the uptime of the processes. Then create a gentimes search that will alert you when the process is not running since there will be no logs that will indicate the process is down I believe.

0 Karma
Get Updates on the Splunk Community!

User Groups | Upcoming Events!

If by chance you weren't already aware, the Splunk Community is host to numerous User Groups, organized ...

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...