Monitoring Splunk

Splunk search and indexer nodes health check url

dhavamanis
Builder

Can you please provide the Splunk search and indexer nodes health check url to use this for DNS / VIP level to check whether the nodes are active or not.

Tags (1)
1 Solution

grijhwani
Motivator

An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.

View solution in original post

grijhwani
Motivator

An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.

grijhwani
Motivator

Thanks for the up-vote, but it is better just to mark your question answered so it can be seen at a glance.

0 Karma

grijhwani
Motivator

Sorry. If not http, https.

If you log into your indexer, you should be able to see which ports with a netstat command.

0 Karma

dhavamanis
Builder

Thanks, Can you provide the sample url which will provide the xml response with default settings/port.

0 Karma

dhavamanis
Builder

i am getting the below response, Can you please provide the valid url,

[splunk@aozaplp00030 tmp]$ curl http://IPAddress:8089/
curl: (52) Empty reply from server

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...