Can you help me monitor httpd process through Splunk on a Linux Machine?

[ssatti]

Greetings all,

I want to monitor an "httpd" process for a Linux Machine, and if the process is down or not running, I need to shoot an alert.

Could you please help me with the search query for this?

Thanks in advance.

[lakshman239]

You can install nix add on and enable the process monitoring scripted input. This gives you all active processed, including 'httpd'. on the server. You can then create a seach/alert when the process 'httpd' is down (not seen in the events coming from the add-on).

https://splunkbase.splunk.com/app/833/

[lakshman239]

Did this help you resolve the issue?

[ssatti]

I already had Nix addon and enabled the process monitoring.
But Search/alert is not working as expected. could you please give me an example search. Thanks Lakshman

[renjith_nair]

@ssatti,
It would be helpful if you could provide some more details.
- Have you tried something ?
- Do you have the events about status already in splunk ? If not you have to start from pushing the status to splunk.
- If you have the events, how do they look like ? Any sample events?