Getting Data In

Unix server Apache instences monitering

marellasunil
Communicator

How to moniter apache instance of a Unix server in splunk.
There are 10 apache instances running every time in Unix server. and my idea is to check whether it is up or down through Splunk.
Can anybody suggest me.
I have a code to run manullay in Server as well
Name : apache_serv
If I run "apache_serv resident all", it list down all the apache instances.

Tags (1)
0 Karma
1 Solution

bmacias84
Champion

Hello,
I am not sure how familiar you are will script inputs or what your deployment process. This is my thought is to create a script input. I assume that apache_serv is a perl, bash, python or some kind of script. If so I would create a .sh file to be ran using splunk script input method. Splunk will then read the output from your command.

Going a little further I would create a Technology Add-on (TA) and deploy it via the Deployment Server.

myApacheInstances.sh


#!/bin/bash
/bin/<script_location>/ apache_serv resident all
done

If I created a TA this call apache_default

Outputs.conf


[script://$SPLUNK_HOME/apache_default/bin/myApacheInstance.sh]
index = <myIndex>
source = myApacheInstances.sh
sourcetype = <mySourceType>
#My interval for collection
interval = 0 0 * * *

Additional Reading:

Setupcustominputs

CreatingaTechnologyAdd-on

Hope this helps or gets you started. Dont forget to thumbs up and/or accept answers.

Cheers

View solution in original post

0 Karma

bmacias84
Champion

Hello,
I am not sure how familiar you are will script inputs or what your deployment process. This is my thought is to create a script input. I assume that apache_serv is a perl, bash, python or some kind of script. If so I would create a .sh file to be ran using splunk script input method. Splunk will then read the output from your command.

Going a little further I would create a Technology Add-on (TA) and deploy it via the Deployment Server.

myApacheInstances.sh


#!/bin/bash
/bin/<script_location>/ apache_serv resident all
done

If I created a TA this call apache_default

Outputs.conf


[script://$SPLUNK_HOME/apache_default/bin/myApacheInstance.sh]
index = <myIndex>
source = myApacheInstances.sh
sourcetype = <mySourceType>
#My interval for collection
interval = 0 0 * * *

Additional Reading:

Setupcustominputs

CreatingaTechnologyAdd-on

Hope this helps or gets you started. Dont forget to thumbs up and/or accept answers.

Cheers

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...