Splunk ITSI

Maintenance Window for bulk of servers under Splunk monitoring

EAR009
Explorer

We regularly perform patching activity on Windows servers under monitoring in Splunk where we have to initiate maintenance window for 300 to 400 servers on one go. We dont want to put entire service into maintenance which will affect monitoring on other Windows servers.

We tried using REST API but it's not quite useful because start and end time in epoch, servers names cannot be used directly.

Please let me know whether we have any custom solution to achieve this requirement.

Labels (1)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Holistic Visibility and Effective Alerting Across IT and OT Assets

Instead of effective and unified solutions, they’re left with tool fatigue, disjointed alerts and siloed ...

SOC Modernization: How Automation and Splunk SOAR are Shaping the Next-Gen Security ...

Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower ...

Ask It, Fix It: Faster Investigations with AI Assistant in Observability Cloud

  Join us in this Tech Talk and learn about the recently launched AI Assistant in Observability Cloud. With ...