Monitoring Splunk

Measuring Splunkd Uptime

rgilliam01
New Member

Looking for a way to measure splunkd service uptime, and alert on when it's down. Not so much worried about system uptime itself, just want to look at measuring splunkd uptime.

0 Karma

woodcock
Esteemed Legend

You can run this search on your most widely peered Search Head (usually your Monitoring Console) and then check the responding peers against a splunk_infrastructure_hosts.csv lookup and then alert if any are not showing:

|rest/services/server/info

lloydknight
Builder

If your splunk is running on Unix systems, try installing the unix and linux add-on app then enable the script that captures the uptime of the processes. Then create a gentimes search that will alert you when the process is not running since there will be no logs that will indicate the process is down I believe.

0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...