Splunk Search

How to check the search peer status via command line?

krishnani
New Member

Hello,

Is there any CLI command to check the peer status?

Thanks

0 Karma
1 Solution

somesoni2
Revered Legend

Try this (gives xml output with status of all search peer)

./splunk _internal call /services/search/distributed/peers 

OR

./splunk search "| rest /services/search/distributed/peers | rename status as search_peer_status| table host replicationStatus search_peer_status startup_time "

View solution in original post

dd_msearles
Path Finder

Would this not be cleaner?

./splunk list search-server
Server at URI "11.22.33.44:8089" with status as "Up"
Server at URI "22.33.44.55:8089" with status as "Up"
Server at URI "33.44.55.66:8089" with status as "Up"
0 Karma

somesoni2
Revered Legend

Try this (gives xml output with status of all search peer)

./splunk _internal call /services/search/distributed/peers 

OR

./splunk search "| rest /services/search/distributed/peers | rename status as search_peer_status| table host replicationStatus search_peer_status startup_time "

krishnani
New Member

Thanks Somesh 🙂

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...