Splunk Search

How to check the search peer status via command line?

krishnani
New Member

Hello,

Is there any CLI command to check the peer status?

Thanks

0 Karma
1 Solution

somesoni2
Revered Legend

Try this (gives xml output with status of all search peer)

./splunk _internal call /services/search/distributed/peers 

OR

./splunk search "| rest /services/search/distributed/peers | rename status as search_peer_status| table host replicationStatus search_peer_status startup_time "

View solution in original post

dd_msearles
Path Finder

Would this not be cleaner?

./splunk list search-server
Server at URI "11.22.33.44:8089" with status as "Up"
Server at URI "22.33.44.55:8089" with status as "Up"
Server at URI "33.44.55.66:8089" with status as "Up"
0 Karma

somesoni2
Revered Legend

Try this (gives xml output with status of all search peer)

./splunk _internal call /services/search/distributed/peers 

OR

./splunk search "| rest /services/search/distributed/peers | rename status as search_peer_status| table host replicationStatus search_peer_status startup_time "

krishnani
New Member

Thanks Somesh 🙂

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...