Splunk Search

Search for status of health status of splunkd

g_paternicola
Path Finder

 

Hi everyone, I'm looking for a search, that shows me when the health status of splunkd is changing from green to yellow or red...

Would that be possible?

 

g_paternicola_0-1634543353219.png

Labels (1)
Tags (2)
0 Karma
1 Solution

venkatasri
SplunkTrust
SplunkTrust
0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @g_paternicola 

you can use this rest API  - Introspection endpoint descriptions - Splunk Documentation

--

An upvote would be appreciated if this reply helps!

0 Karma

venkatasri
SplunkTrust
SplunkTrust
| rest splunk_server=local "/services/server/health/splunkd" | table health
0 Karma

g_paternicola
Path Finder

 

 

Thank you very much! That's a good one. Would also be possible to get which service has a warning or error?

Tags (2)
0 Karma

venkatasri
SplunkTrust
SplunkTrust
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!