Hello,
We have a monitoring console that works great. I am able to connect directly to the server containing the console and get everything I need. However, we need to start mixing this data with other dashboards on the search heads. This is where I come up dry.
rest splunk_server=local /services/cluster/master/indexes on the (Monitoring Console Server" returns data, unformatted data, but still data.
running the below search on the search heads returns nothing. It doesn't error out, just no data is returned
| rest splunk_server=(Monitoring Console Server) /services/cluster/master/indexes
Where should I go from here?
Any/all help is appreciated.
Thanks!