I need to know if my asset/ hosts/devices has splunk forwarder installed . Which API would give me that information, and what would be the column name in that API.
Not sure about an API but you could do a powershell script like this:
$computers = "Computer1", "Computer2", "Computer3", "Computer4"
foreach ($computer in $computers){
try {
$result = Get-Service -ComputerName $computer | where {$_.Name -like "SplunkForwarder"}
}
catch {
Write-Host "Some problem occured accessing" $computer -ForegroundColor Red
}
if ($result -ne $null) {
Write-Host $computer "Has Splunk Forwarder Installed" -ForegroundColor Green
}
$result = $null
}
Not sure about an API but you could do a powershell script like this:
$computers = "Computer1", "Computer2", "Computer3", "Computer4"
foreach ($computer in $computers){
try {
$result = Get-Service -ComputerName $computer | where {$_.Name -like "SplunkForwarder"}
}
catch {
Write-Host "Some problem occured accessing" $computer -ForegroundColor Red
}
if ($result -ne $null) {
Write-Host $computer "Has Splunk Forwarder Installed" -ForegroundColor Green
}
$result = $null
}
Thanks for the response,, Appreciate it.. I am specifically looking for the API which can bring in the splunk forwarder information.
My usecase would be enterprise wide and would not be feasible to get a report for all the splunk forwarder information.