Monitoring Splunk

Splunk search and indexer nodes health check url

dhavamanis
Builder

Can you please provide the Splunk search and indexer nodes health check url to use this for DNS / VIP level to check whether the nodes are active or not.

Tags (1)
1 Solution

grijhwani
Motivator

An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.

View solution in original post

grijhwani
Motivator

An HTTP poll to port 8089 (or whichever port you have configured) should return valid XML. This is, actually, a FAQ. Checking the presence of port 9997 (default) is a good indicator of a working indexer.

grijhwani
Motivator

Thanks for the up-vote, but it is better just to mark your question answered so it can be seen at a glance.

0 Karma

grijhwani
Motivator

Sorry. If not http, https.

If you log into your indexer, you should be able to see which ports with a netstat command.

0 Karma

dhavamanis
Builder

Thanks, Can you provide the sample url which will provide the xml response with default settings/port.

0 Karma

dhavamanis
Builder

i am getting the below response, Can you please provide the valid url,

[splunk@aozaplp00030 tmp]$ curl http://IPAddress:8089/
curl: (52) Empty reply from server

0 Karma
Get Updates on the Splunk Community!

Modern way of developing distributed application using OTel

Recently, I had the opportunity to work on a complex microservice using Spring boot and Quarkus to develop a ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had 3 releases of new security content via the Enterprise Security ...

Archived Metrics Now Available for APAC and EMEA realms

We’re excited to announce the launch of Archived Metrics in Splunk Infrastructure Monitoring for our customers ...