Join the Conversation
- Find Answers
- :
- Splunk Administration
- :
- Monitoring Splunk
- :
- Splunk search and indexer nodes health check url
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Can you please provide the Splunk search and indexer nodes health check url to use this for DNS / VIP level to check whether the nodes are active or not.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for the up-vote, but it is better just to mark your question answered so it can be seen at a glance.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Sorry. If not http, https.
If you log into your indexer, you should be able to see which ports with a netstat command.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks, Can you provide the sample url which will provide the xml response with default settings/port.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
i am getting the below response, Can you please provide the valid url,
[splunk@aozaplp00030 tmp]$ curl http://IPAddress:8089/
curl: (52) Empty reply from server
Accelerating Observability as Code with the Splunk AI Assistant
Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...
Congratulations to the 2025-2026 SplunkTrust!
