Have to trigger Alert if Indexer or search head goes down

[sravankaripe]

Hi ,

Please help me with the search to setup the alert
If Indexer or search head goes down in the cluster.

Thanks

[p_gurav · Accepted solution]

Hi,

Can you try below searches:

For indexer cluster :

 | rest /services/cluster/master/peers | table label status | where status!="Up"

For Search head cluster:

| rest /services/shcluster/captain/members/ | table label status | where status!="Up"