Greetings all,
I want to monitor an "httpd" process for a Linux Machine, and if the process is down or not running, I need to shoot an alert.
Could you please help me with the search query for this?
Thanks in advance.
You can install nix add on and enable the process monitoring scripted input. This gives you all active processed, including 'httpd'. on the server. You can then create a seach/alert when the process 'httpd' is down (not seen in the events coming from the add-on).
Did this help you resolve the issue?
I already had Nix addon and enabled the process monitoring.
But Search/alert is not working as expected. could you please give me an example search. Thanks Lakshman
@ssatti,
It would be helpful if you could provide some more details.
- Have you tried something ?
- Do you have the events about status already in splunk ? If not you have to start from pushing the status to splunk.
- If you have the events, how do they look like ? Any sample events?