Getting Data In

Splunk Monitoring

gdavid
Path Finder

I want to have a check for Splunk by monitoring it with our monitoring platform.
We recently ran into a windows bug where we run out of server connections. Server is pingable, splunkd/splunk web are both running fine.

can someone provide a more creative way to monitor?

during our bug i noticed that splunk web was unable to populate the login page with proper footer info:

it came up as version unknown. this was one additional way i was considering monitoring it.

Tags (2)
0 Karma

sowings
Splunk Employee
Splunk Employee

When you see that version unknown, the splunkweb (UI) process was unable to contact splunkd (Splunk service).

0 Karma

sowings
Splunk Employee
Splunk Employee

Are you using the Splunk deployment server while having it be a client of itself? I saw the issue linked below when attempting to do the same:

http://answers.splunk.com/answers/41449/winsock-error-10055

lukejadamec
Super Champion

When you say you ran out of server connections what do you mean?
You say splunk web was running fine, but the page did not fully populate... were you able to log in? Were you on the local system or accessing it from the network?
You said that splunkd was running, but was it working? Were the forwarders able to send data, or were the forwarder logs showing connection errors?

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...