Determine which server in search head pool is being used

[rtadams89]

I'd like to have some indication of which server in a search head pool I am currently using. For instance, having the name of the server that rendered the page included in the footer of all the splunkweb pages.

Does this information already exist somewhere or are there any modifications I can make to include it on all splunkweb pages?

[martin_mueller · Accepted solution]

There are several ways. For a manual example, you can click the About link in the bottom left corner that should tell you the Server Name of your search head. For a more automated way, you can run this query:

| rest splunk_server=local /services/server/info

That will include fields serverName and splunk_server - you could include that somewhere in a search powering your dashboards and display it.

As for including it in every footer automatically, while that can be done it's not as straightforward as modifying dashboard XML and isn't going to be upgrade-safe.

[martin_mueller]

Right - I was talking about Splunk 6. The REST call should work there as well, not sure about the interface changes.

A caveat about the General Settings idea - that only works for admins.

[somesoni2]

Try: Manager » System settings » General settings

[rtadams89]

I'm running 5.0.6. The "About" link for me appears in the upper right corner next to "Help". However, the box that this link opens does not show the server name. Should I be looking somewhere else?