Splunk Search

How to check the search peer status via command line?

krishnani
New Member

Hello,

Is there any CLI command to check the peer status?

Thanks

0 Karma
1 Solution

somesoni2
Revered Legend

Try this (gives xml output with status of all search peer)

./splunk _internal call /services/search/distributed/peers 

OR

./splunk search "| rest /services/search/distributed/peers | rename status as search_peer_status| table host replicationStatus search_peer_status startup_time "

View solution in original post

dd_msearles
Path Finder

Would this not be cleaner?

./splunk list search-server
Server at URI "11.22.33.44:8089" with status as "Up"
Server at URI "22.33.44.55:8089" with status as "Up"
Server at URI "33.44.55.66:8089" with status as "Up"
0 Karma

somesoni2
Revered Legend

Try this (gives xml output with status of all search peer)

./splunk _internal call /services/search/distributed/peers 

OR

./splunk search "| rest /services/search/distributed/peers | rename status as search_peer_status| table host replicationStatus search_peer_status startup_time "

krishnani
New Member

Thanks Somesh 🙂

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...