Monitoring Splunk

Splunk search and indexer nodes health check url

dhavamanis
Builder

Can you please provide the Splunk search and indexer nodes health check url to use this for DNS / VIP level to check whether the nodes are active or not.

Tags (1)
1 Solution

grijhwani
Motivator

An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.

View solution in original post

grijhwani
Motivator

An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.

grijhwani
Motivator

Thanks for the up-vote, but it is better just to mark your question answered so it can be seen at a glance.

0 Karma

grijhwani
Motivator

Sorry. If not http, https.

If you log into your indexer, you should be able to see which ports with a netstat command.

0 Karma

dhavamanis
Builder

Thanks, Can you provide the sample url which will provide the xml response with default settings/port.

0 Karma

dhavamanis
Builder

i am getting the below response, Can you please provide the valid url,

[splunk@aozaplp00030 tmp]$ curl http://IPAddress:8089/
curl: (52) Empty reply from server

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...