Splunk Search

Search for status of health status of splunkd

g_paternicola
Path Finder

 

Hi everyone, I'm looking for a search, that shows me when the health status of splunkd is changing from green to yellow or red...

Would that be possible?

 

g_paternicola_0-1634543353219.png

Labels (1)
Tags (2)
0 Karma
1 Solution

venkatasri
SplunkTrust
SplunkTrust
0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @g_paternicola 

you can use this rest API  - Introspection endpoint descriptions - Splunk Documentation

--

An upvote would be appreciated if this reply helps!

0 Karma

venkatasri
SplunkTrust
SplunkTrust
| rest splunk_server=local "/services/server/health/splunkd" | table health
0 Karma

g_paternicola
Path Finder

 

 

Thank you very much! That's a good one. Would also be possible to get which service has a warning or error?

Tags (2)
0 Karma

venkatasri
SplunkTrust
SplunkTrust
0 Karma
Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...