Splunk Search

Can i input a list of ServiceNames from the a file and then get the status of those services from the data in splunk servers ?

varun99
Path Finder

I have a list of services. I want to create a kind of a health check report for all the services.

The problem is I am not very sure if all the Service logs are being consumed in splunk. That is the reason I don't want to create a list from the data already present in SPLUNK. Requirement would be to list down the Name of the services and status of the services. If those service logs are not found in SPLUNK, I want to highlight something like 'Service Logs not being consumed as of now'.

Kindly help.

0 Karma

ansif
Motivator

If you have a input defined as below all window services get listed:

[WinHostMon://Service]
interval = <>
disabled = 0
type = Service
index = windows

index=windows sourcetype=WinHostMon source=services

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  &#x1f680; Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...