Security

Is there any Keep Alive method for SplunkWeb in LB environment ?

mzorzi
Splunk Employee
Splunk Employee

I have a pair of Search Servers A + B , these are fronted by a Load Balancer so the users just go to a single IP Address and could get routed to either web server.

We want the Load Balancer to perform simple keep alive checking on the two Search Servers. I thought I could achieve this by dropping in a simple keepAlive.html file for the LB to check.

I have tried placing this in /share/splunk/search_mrsparkle/exposed and having the LB attempt to retrieve it using /static/keepAlive.html , however splunkweb changes this to /en-GB/static/keepAlive.html and returns HTTP-401.

Is my approach incorrect, how would you go about this if possible ?

Tags (1)

dwaddle
SplunkTrust
SplunkTrust

Is there any reason to not have the load balancer monitor the indexer's login page? (https://your.splunk.server:8043/en-US/account/login) That is as good of an indicator that splunkweb is running as anything else might be.

Simeon
Splunk Employee
Splunk Employee

The load balancer (LB) will need to be sticky to the search head you are searching. There is not any keep alive handling that I am aware of for this type of scenario. If you need to access some specific file on the server that does not require authentication, then you may need to use a different path. I don't believe that path will work.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...