|
Is there a search string that would report on the status of splunkweb on each forwarding host? |
One Answer:
|
Not exactly. You could check for the existence and most recent time of a startup message in the Splunk internal It looks like you would have to set the forwarder to monitor the web_service.log, or otherwise forward the contents of the forwarders _internal index. As far as I can tell, searching as you suggested will only return information for the indexers web_service.log, unless I am missing something.
(20 Jul '10, 19:26)
muebel ♦
|
