- Find Answers
- :
- Splunk Administration
- :
- Monitoring Splunk
- :
- Why does monitoring console show searchhead as dow...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Our Monitoring Console on the DMC/License Master shows the Search Head as down in Topology and in Overview.
When clicking further it shows as Up on some of the other screens but not all panels are filled in Resource monitoring / performance of the SH server.
The search head runs just fine and is sending license information through to the LM. No errors occur in the Splunk logs that show an issue.
What could be the issue?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Try this: Go into the Monitoring Console set up page - check that everything is okay - and click Apply Changes. Even if you don't change anything, click on Apply Changes (or save or whatever it is called in your version.)
Perhaps something changed along the way (who knows what) and the Monitoring Console settings just need to be refreshed.
I have had this problem a few times.
Let us know if that doesn't work.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Fixed it by editing the assets.csv in the monitoring console app.
The "Apply Changes" fix might work as well (see above).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
can you please specify what editing was required to fix it
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Try this: Go into the Monitoring Console set up page - check that everything is okay - and click Apply Changes. Even if you don't change anything, click on Apply Changes (or save or whatever it is called in your version.)
Perhaps something changed along the way (who knows what) and the Monitoring Console settings just need to be refreshed.
I have had this problem a few times.
Let us know if that doesn't work.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This solution works in 8.2.2.1 as well....thanks for this, I was about to pull hair.
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
