Getting Data In

detecting when an indexer is down

rubenstoll
Engager

How can I detect when an indexer is down? Is there an api call to poll for the status of the indexer? Or will a failing indexer report a problem - raise a flag, throw and exception, etc? I am using the REST api for a custom application. I need to know if an indexer fails when I execute a query that takes a long time to complete.

yannK
Splunk Employee
Splunk Employee

I couldn't found an event in splunk logs , even when a search detect a missing search-peer.
You could use a script that check the REST api on the other indexer

https://splunkidx59745.renraku.com:8089/services
(make to sure to accept the ssl certificate)

0 Karma
Get Updates on the Splunk Community!

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...

Adoption of Infrastructure Monitoring at Splunk

  Splunk's Growth Engineering team showcases one of their first Splunk product adoption-Splunk Infrastructure ...