Splunk Search

Search for status of health status of splunkd

g_paternicola
Path Finder

 

Hi everyone, I'm looking for a search, that shows me when the health status of splunkd is changing from green to yellow or red...

Would that be possible?

 

g_paternicola_0-1634543353219.png

Labels (1)
Tags (2)
0 Karma
1 Solution

venkatasri
SplunkTrust
SplunkTrust
0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @g_paternicola 

you can use this rest API  - Introspection endpoint descriptions - Splunk Documentation

--

An upvote would be appreciated if this reply helps!

0 Karma

venkatasri
SplunkTrust
SplunkTrust
| rest splunk_server=local "/services/server/health/splunkd" | table health
0 Karma

g_paternicola
Path Finder

 

 

Thank you very much! That's a good one. Would also be possible to get which service has a warning or error?

Tags (2)
0 Karma

venkatasri
SplunkTrust
SplunkTrust
0 Karma
Get Updates on the Splunk Community!

Message Parsing in SOCK

Introduction This blog post is part of an ongoing series on SOCK enablement. In this blog post, I will write ...

Exploring the OpenTelemetry Collector’s Kubernetes annotation-based discovery

We’ve already explored a few topics around observability in a Kubernetes environment -- Common Failures in a ...

Use ‘em or lose ‘em | Splunk training units do expire

Whether it’s hummus, a ham sandwich, or a human, almost everything in this world has an expiration date. And, ...