Search for status of health status of splunkd

[g_paternicola]

Hi everyone, I'm looking for a search, that shows me when the health status of splunkd is changing from green to yellow or red...

Would that be possible?

[venkatasri]

Hi @g_paternicola 

you can use this rest API  - Introspection endpoint descriptions - Splunk Documentation

--

An upvote would be appreciated if this reply helps!

[venkatasri]

| rest splunk_server=local "/services/server/health/splunkd" | table health

[g_paternicola]

Thank you very much! That's a good one. Would also be possible to get which service has a warning or error?

[venkatasri · Accepted solution]

Try this - https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTintrospect#server.2Fhealth.2Fsplunkd....

--

An upvote would be appreciated if this reply helps!