Monitoring Splunk

Splunk search and indexer nodes health check url

dhavamanis
Builder

Can you please provide the Splunk search and indexer nodes health check url to use this for DNS / VIP level to check whether the nodes are active or not.

Tags (1)
1 Solution

grijhwani
Motivator

An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.

View solution in original post

grijhwani
Motivator

An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.

grijhwani
Motivator

Thanks for the up-vote, but it is better just to mark your question answered so it can be seen at a glance.

0 Karma

grijhwani
Motivator

Sorry. If not http, https.

If you log into your indexer, you should be able to see which ports with a netstat command.

0 Karma

dhavamanis
Builder

Thanks, Can you provide the sample url which will provide the xml response with default settings/port.

0 Karma

dhavamanis
Builder

i am getting the below response, Can you please provide the valid url,

[splunk@aozaplp00030 tmp]$ curl http://IPAddress:8089/
curl: (52) Empty reply from server

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...