Related Answers
This documentation does not apply to the most recent version of Splunk.
Click here for the latest version.
Download topic as PDF
Cluster endpoint examples
cluster/config GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/config
XML Response
<title>clusterconfig</title>
<id>https://localhost:8089/services/cluster/config</id>
<updated>2012-09-05T10:19:49-07:00</updated>
<generator build="136169" version="5.0"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/config/_reload" rel="_reload"/>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>config</title>
<id>https://localhost:8089/services/cluster/config/config</id>
<updated>2012-09-05T10:19:49-07:00</updated>
<link href="/services/cluster/config/config" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/config/config" rel="list"/>
<link href="/services/cluster/config/config/_reload" rel="_reload"/>
<link href="/services/cluster/config/config" rel="edit"/>
<link href="/services/cluster/config/config/disable" rel="disable"/>
<content type="text/xml">
<s:dict>
<s:key name="cxn_timeout">60</s:key>
<s:key name="disabled">0</s:key>
... eai:acl node elided ...
<s:key name="forwarderdata_rcv_port">0</s:key>
<s:key name="forwarderdata_use_ssl">1</s:key>
<s:key name="heartbeat_period">1</s:key>
<s:key name="heartbeat_timeout">60</s:key>
<s:key name="master_uri"></s:key>
<s:key name="max_peer_build_load">5</s:key>
<s:key name="max_peer_rep_load">5</s:key>
<s:key name="mode">master</s:key>
<s:key name="ping_flag">1</s:key>
<s:key name="quiet_period">60</s:key>
<s:key name="rcv_timeout">60</s:key>
<s:key name="register_forwarder_address"></s:key>
<s:key name="register_replication_address"></s:key>
<s:key name="register_search_address"></s:key>
<s:key name="rep_cxn_timeout">5</s:key>
<s:key name="rep_max_rcv_timeout">600</s:key>
<s:key name="rep_max_send_timeout">600</s:key>
<s:key name="rep_rcv_timeout">10</s:key>
<s:key name="rep_send_timeout">5</s:key>
<s:key name="replication_factor">2</s:key>
<s:key name="replication_port"></s:key>
<s:key name="replication_use_ssl">0</s:key>
<s:key name="restart_timeout">600</s:key>
<s:key name="search_factor">2</s:key>
<s:key name="secret">********</s:key>
<s:key name="send_timeout">60</s:key>
</s:dict>
</content>
</entry>
cluster/config/config POST
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/config/config -d cxn_timeout=59
XML Response
<title>clusterconfig</title>
<id>https://localhost:8089/services/cluster/config</id>
<updated>2015-12-07T17:09:48-08:00</updated>
<generator build="917abedc8bb44ec1c225a6eb730808a606174cf0" version="20151123"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/config/_reload" rel="_reload"/>
<link href="/services/cluster/config/_acl" rel="_acl"/>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
cluster/master/buckets GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/buckets
XML Response
<title>clustermasterbuckets</title>
<id>https://localhost:8089/services/cluster/master/buckets</id>
<updated>2014-04-17T19:13:57+00:00</updated>
<generator build="204899" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/buckets/_new" rel="create"/>
<opensearch:totalResults>24</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>_audit~0~238C3311-F0A4-4A9B-97F0-53667CFFEEAB</title>
<id>https://localhost:8089/services/cluster/master/buckets/_audit~0~238C3311-F0A4-4A9B-97F0-53667CFFEEAB</id>
<updated>2014-04-17T19:13:57+00:00</updated>
<link href="/services/cluster/master/buckets/_audit~0~238C3311-F0A4-4A9B-97F0-53667CFFEEAB" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/buckets/_audit~0~238C3311-F0A4-4A9B-97F0-53667CFFEEAB" rel="list"/>
<link href="/services/cluster/master/buckets/_audit~0~238C3311-F0A4-4A9B-97F0-53667CFFEEAB" rel="remove"/>
<content type="text/xml">
<s:dict>
<s:key name="bucket_size">47187</s:key>
<s:key name="constrain_to_origin_site">1</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="force_roll">0</s:key>
<s:key name="frozen">0</s:key>
<s:key name="index">_audit</s:key>
<s:key name="origin_site">site2</s:key>
<s:key name="peers">
<s:dict>
<s:key name="238C3311-F0A4-4A9B-97F0-53667CFFEEAB">
<s:dict>
<s:key name="bucket_flags">0x6</s:key>
<s:key name="checksum"></s:key>
<s:key name="checksum_state">StableCksum</s:key>
<s:key name="search_state">Searchable</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
<s:key name="C878FADC-513D-4BDD-BA48-F25BB82FE565">
<s:dict>
<s:key name="bucket_flags">0x0</s:key>
<s:key name="checksum"></s:key>
<s:key name="checksum_state">StableCksum</s:key>
<s:key name="search_state">Searchable</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
<s:key name="E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C">
<s:dict>
<s:key name="bucket_flags">0x0</s:key>
<s:key name="checksum"></s:key>
<s:key name="checksum_state">StableCksum</s:key>
<s:key name="search_state">Unsearchable</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="primaries_by_site">
<s:dict>
<s:key name="site1">238C3311-F0A4-4A9B-97F0-53667CFFEEAB</s:key>
<s:key name="site2">238C3311-F0A4-4A9B-97F0-53667CFFEEAB</s:key>
</s:dict>
</s:key>
<s:key name="rep_count_by_site">
<s:dict>
<s:key name="site2">3</s:key>
</s:dict>
</s:key>
<s:key name="search_count_by_site">
<s:dict>
<s:key name="site2">2</s:key>
</s:dict>
</s:key>
<s:key name="service_after_time">0</s:key>
<s:key name="standalone">0</s:key>
</s:dict>
</content>
</entry>
<entry>
.
.
.
elided
.
.
.
<entry>
<title>_internal~1~E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C</title>
<id>https://localhost:8089/services/cluster/master/buckets/_internal~1~E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C</id>
<updated>2014-04-17T19:13:57+00:00</updated>
<link href="/services/cluster/master/buckets/_internal~1~E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/buckets/_internal~1~E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C" rel="list"/>
<link href="/services/cluster/master/buckets/_internal~1~E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C" rel="remove"/>
<content type="text/xml">
<s:dict>
<s:key name="bucket_size"></s:key>
<s:key name="constrain_to_origin_site">0</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="force_roll">0</s:key>
<s:key name="frozen">0</s:key>
<s:key name="index">_internal</s:key>
<s:key name="origin_site">site2</s:key>
<s:key name="peers">
<s:dict>
<s:key name="61666763-43E9-411B-9464-D80A5119EF0E">
<s:dict>
<s:key name="bucket_flags">0x2</s:key>
<s:key name="checksum"></s:key>
<s:key name="checksum_state">StableCksum</s:key>
<s:key name="search_state">Searchable</s:key>
<s:key name="status">StreamingTarget</s:key>
</s:dict>
</s:key>
<s:key name="C878FADC-513D-4BDD-BA48-F25BB82FE565">
<s:dict>
<s:key name="bucket_flags">0x0</s:key>
<s:key name="checksum"></s:key>
<s:key name="checksum_state">StableCksum</s:key>
<s:key name="search_state">Unsearchable</s:key>
<s:key name="status">StreamingTarget</s:key>
</s:dict>
</s:key>
<s:key name="E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C">
<s:dict>
<s:key name="bucket_flags">0x4</s:key>
<s:key name="checksum"></s:key>
<s:key name="checksum_state">StableCksum</s:key>
<s:key name="search_state">Searchable</s:key>
<s:key name="status">StreamingSource</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="primaries_by_site">
<s:dict>
<s:key name="site1">61666763-43E9-411B-9464-D80A5119EF0E</s:key>
<s:key name="site2">E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C</s:key>
</s:dict>
</s:key>
<s:key name="rep_count_by_site">
<s:dict>
<s:key name="site1">1</s:key>
<s:key name="site2">2</s:key>
</s:dict>
</s:key>
<s:key name="search_count_by_site">
<s:dict>
<s:key name="site1">1</s:key>
<s:key name="site2">1</s:key>
</s:dict>
</s:key>
<s:key name="service_after_time">0</s:key>
<s:key name="standalone">0</s:key>
</s:dict>
</content>
</entry>
cluster/master/buckets/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/buckets/internal~1~238C3311-F0A4-4A9B-97F0-53667CFFEEAB
XML Response
<title>clustermasterbuckets</title>
<id>https://localhost:8089/services/cluster/master/buckets</id>
<updated>2014-04-17T19:16:03+00:00</updated>
<generator build="204899" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/buckets/_new" rel="create"/>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>_internal~1~238C3311-F0A4-4A9B-97F0-53667CFFEEAB</title>
<id>https://localhost:8089/services/cluster/master/buckets/_internal~1~238C3311-F0A4-4A9B-97F0-53667CFFEEAB</id>
<updated>2014-04-17T19:16:03+00:00</updated>
<link href="/services/cluster/master/buckets/_internal~1~238C3311-F0A4-4A9B-97F0-53667CFFEEAB" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/buckets/_internal~1~238C3311-F0A4-4A9B-97F0-53667CFFEEAB" rel="list"/>
<link href="/services/cluster/master/buckets/_internal~1~238C3311-F0A4-4A9B-97F0-53667CFFEEAB" rel="remove"/>
<content type="text/xml">
<s:dict>
<s:key name="bucket_size"></s:key>
<s:key name="constrain_to_origin_site">0</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="eai:attributes">
... elided ...
</s:key>
<s:key name="force_roll">0</s:key>
<s:key name="frozen">0</s:key>
<s:key name="index">_internal</s:key>
<s:key name="origin_site">site2</s:key>
<s:key name="peers">
<s:dict>
<s:key name="238C3311-F0A4-4A9B-97F0-53667CFFEEAB">
<s:dict>
<s:key name="bucket_flags">0x4</s:key>
<s:key name="checksum"></s:key>
<s:key name="checksum_state">StableCksum</s:key>
<s:key name="search_state">Searchable</s:key>
<s:key name="status">StreamingSource</s:key>
</s:dict>
</s:key>
<s:key name="29F9560E-A44A-425C-8753-1C6158B46C84">
<s:dict>
<s:key name="bucket_flags">0x2</s:key>
<s:key name="checksum"></s:key>
<s:key name="checksum_state">StableCksum</s:key>
<s:key name="search_state">Searchable</s:key>
<s:key name="status">StreamingTarget</s:key>
</s:dict>
</s:key>
<s:key name="C878FADC-513D-4BDD-BA48-F25BB82FE565">
<s:dict>
<s:key name="bucket_flags">0x0</s:key>
<s:key name="checksum"></s:key>
<s:key name="checksum_state">StableCksum</s:key>
<s:key name="search_state">Unsearchable</s:key>
<s:key name="status">StreamingTarget</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="primaries_by_site">
<s:dict>
<s:key name="site1">29F9560E-A44A-425C-8753-1C6158B46C84</s:key>
<s:key name="site2">238C3311-F0A4-4A9B-97F0-53667CFFEEAB</s:key>
</s:dict>
</s:key>
<s:key name="rep_count_by_site">
<s:dict>
<s:key name="site1">1</s:key>
<s:key name="site2">2</s:key>
</s:dict>
</s:key>
<s:key name="search_count_by_site">
<s:dict>
<s:key name="site1">1</s:key>
<s:key name="site2">1</s:key>
</s:dict>
</s:key>
<s:key name="service_after_time">0</s:key>
<s:key name="standalone">0</s:key>
</s:dict>
</content>
</entry>
cluster/master/buckets/{bucket_id}/fix POST
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/cluster/master/buckets/_internal~0~111175BA-00DF-4CFE-9AEC-48A87B97EC71/fix -X POST
XML Response
<title>clustermasterbuckets</title>
<id>https://localhost:8089/services/cluster/master/buckets</id>
<updated>2015-11-04T12:23:57-08:00</updated>
<generator build="8effae892620f7b651853d141b7b7a6b61b929c0" version="20151102"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/buckets/_new" rel="create"/>
<link href="/services/cluster/master/buckets/_acl" rel="_acl"/>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
cluster/master/buckets/{bucket_id}/freeze POST
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/buckets/_internal~0~111175BA-00DF-4CFE-9AEC-48A87B97EC71/freeze -X POST
XML Response
<title>clustermasterbuckets</title>
<id>https://locahost:8089/services/cluster/master/buckets</id>
<updated>2015-11-04T12:21:27-08:00</updated>
<generator build="8effae892620f7b651853d141b7b7a6b61b929c0" version="20151102"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/buckets/_new" rel="create"/>
<link href="/services/cluster/master/buckets/_acl" rel="_acl"/>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>cluster/master/buckets/{bucket_id}/remove_all POST
XML
XML Request
curl -k -u admin:password https://localhost:8089/services/cluster/master/buckets/_internal~0~111175BA-00DF-4CFE-9AEC-48A87B97EC71/remove_all -X POST
XML Response
<title>clustermasterbuckets</title>
<id>https://localhost:8089/services/cluster/master/buckets</id>
<updated>2015-11-04T12:24:12-08:00</updated>
<generator build="8effae892620f7b653d141b7b7a6b61b929c0" version="20151102"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/buckets/_new" rel="create"/>
<link href="/services/cluster/master/buckets/_acl" rel="_acl"/>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
cluster/master/buckets/{bucket_id}/remove_from_peer POST
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/buckets/_internal~0~111175BA-00DF-4CFE-9AEC-48A87B97EC71/remove_from_peer -X POST -d peer=222275BA-00DF-4CFE-9AEC-48A87B97EC71
XML Response
<title>clustermasterbuckets</title>
<id>https://localhost:8089/services/cluster/master/buckets</id>
<updated>2015-11-04T12:23:18-08:00</updated>
<generator build="8effae892620f7b651853d141b7b7a6b61b929c0" version="20151102"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/buckets/_new" rel="create"/>
<link href="/services/cluster/master/buckets/_acl" rel="_acl"/>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
cluster/master/control/control/rebalance_primaries POST
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/control/control/rebalance_primaries --request POST
XML Response
<title>clustermastercontrol</title> <id>https://localhost:8089/services/cluster/master/control</id> <updated>2013-08-21T13:08:52-07:00</updated> <generator build="176231" version="6.0"/> <author> <name>Splunk</name> </author> <opensearch:totalResults>0</opensearch:totalResults> <opensearch:itemsPerPage>30</opensearch:itemsPerPage> <opensearch:startIndex>0</opensearch:startIndex> <s:messages/>
cluster/master/control/control/remove_peers POST
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/control/control/remove_peers --request POST -d "peers=F2AA19BD-622F-4F8C-A8E0-1233"
XML Response
<title>clustermastercontrol</title> <id>https://localhost:8089/services/cluster/master/control</id> <updated>2014-09-10T13:12:54-07:00</updated> <generator build="230688" version="6.2"/> <author> <name>Splunk</name> </author> ... opensearch nodes elided ... <s:messages/>
cluster/master/control/control/roll-hot-buckets POST
XML
XML Request
curl -k -u username:password https://localhost:8089/services/cluster/master/control/control/roll-hot-buckets -X POST -d "bucket_id=_audit~2~1A3889D7-954B-4CE6-B071-01B438DE9865"
XML Response
<title>clustermastercontrol</title>
<id>https://localhost:8089/services/cluster/master/control</id>
<updated>2015-10-30T07:34:56+08:00</updated>
<generator build="0d98363e4338" version="6.4.0"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/control/_acl" rel="_acl"/>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
cluster/master/control/fixup GET
XML Request
curl -k -u admin:password https://localhost:8089/services/cluster/master/fixup?level=replication_factor
XML Response
<title>clustermasterfixup</title>
<id>https://localhost:8089/services/cluster/master/fixup</id>
<updated>2015-11-09T17:05:48-08:00</updated>
<generator build="802b4ea159bb584c629dcdb8ba57c409b1d5b7ab" version="20151030"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/fixup/_acl" rel="_acl"/>
<opensearch:totalResults>2</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>_audit~212~22220097-5E3F-4D26-B301-ECE3C4CD2222</title>
<id>https://localhost:8089/services/cluster/master/fixup/_audit~212~22220097-5E3F-4D26-B301-ECE3C4CD2222</id>
<updated>2015-11-09T17:05:48-08:00</updated>
<link href="/services/cluster/master/fixup/_audit~212~22220097-5E3F-4D26-B301-ECE3C4CD2222" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/fixup/_audit~212~22220097-5E3F-4D26-B301-ECE3C4CD2222" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">1</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>admin</s:item>
<s:item>splunk-system-role</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>admin</s:item>
<s:item>splunk-system-role</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
<s:key name="index">_audit</s:key>
<s:key name="initial">
<s:dict>
<s:key name="reason">add peer=22220097-5E3F-4D26-B301-ECE3C4CD2222 new bucket</s:key>
<s:key name="timestamp">1447099323</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason">Missing enough suitable candidates to create replicated copy in order to meet replication policy. Missing={ site2:1 }</s:key>
<s:key name="timestamp">1447117547</s:key>
</s:dict>
</s:key>
<s:key name="level">replication_factor</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>_internal~12628~111163F8-61F4-4AB3-A1A7-2EDCB10C1111</title>
<id>https://localhost:8089/services/cluster/master/fixup/_internal~12628~111163F8-61F4-4AB3-A1A7-2EDCB10C1111</id>
<updated>2015-11-09T17:05:48-08:00</updated>
<link href="/services/cluster/master/fixup/_internal~12628~111163F8-61F4-4AB3-A1A7-2EDCB10C1111" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/fixup/_internal~12628~111163F8-61F4-4AB3-A1A7-2EDCB10C1111" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">1</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>admin</s:item>
<s:item>splunk-system-role</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>admin</s:item>
<s:item>splunk-system-role</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
<s:key name="index">_internal</s:key>
<s:key name="initial">
<s:dict>
<s:key name="reason">add peer=111163F8-61F4-4AB3-A1A7-2EDCB10C1111 new bucket</s:key>
<s:key name="timestamp">1447099323</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason">Missing enough suitable candidates to create replicated copy in order to meet replication policy. Missing={ site1:1 }</s:key>
<s:key name="timestamp">1447117547</s:key>
</s:dict>
</s:key>
<s:key name="level">replication_factor</s:key>
</s:dict>
</content>
</entry>
cluster/master/generation GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/generation
XML Response
<title>clustermastergeneration</title>
<id>https://localhost:8089/services/cluster/master/generation</id>
<updated>2012-09-05T10:39:54-07:00</updated>
<generator build="136169" version="5.0"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>master</title>
<id>https://localhost:8089/services/cluster/master/generation/master</id>
<updated>2012-09-05T10:39:54-07:00</updated>
<link href="/services/cluster/master/generation/master" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/generation/master" rel="list"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="generation_id">2</s:key>
<s:key name="generation_peers">
<s:dict>
<s:key name="2AF11DD4-1424-4A14-A522-FB9D055E9516">
<s:dict>
<s:key name="host_port_pair">splunks-ombra.sv.splunk.com:8389</s:key>
<s:key name="peer">splunks-ombra.sv.splunk.com</s:key>
</s:dict>
</s:key>
<s:key name="50FCDB42-E167-458D-A6A9-E4587E8F16D9">
<s:dict>
<s:key name="host_port_pair">splunks-ombra.sv.splunk.com:8189</s:key>
<s:key name="peer">splunks-ombra.sv.splunk.com</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="pending_generation_id">3</s:key>
<s:key name="pending_last_attempt">0</s:key>
<s:key name="pending_last_reason"></s:key>
</s:dict>
</content>
</entry>
cluster/master/generation POST
XML
XML Request
curl -k -u admin:pass https://myserver:8089/services/cluster/master/generation -d name=foo
XML Response
<title>clustermastergeneration</title>
<id>https://myserver:8089/services/cluster/master/generation</id>
<updated>2013-10-31T13:58:51-07:00</updated>
<generator build="184661" version="20131030"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/generation/_new" rel="create"/>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>master</title>
<id>https://myserver:8089/services/cluster/master/generation/master</id>
<updated>2013-10-31T13:58:51-07:00</updated>
<link href="/services/cluster/master/generation/master" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/generation/master" rel="list"/>
<link href="/services/cluster/master/generation/master" rel="edit"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="generation_id">5</s:key>
<s:key name="generation_peers">
<s:dict>
<s:key name="11111111-1111-1111-1111-111111111111">
<s:dict>
<s:key name="host_port_pair">myserver.splunk.com:6431</s:key>
<s:key name="peer">PEER1</s:key>
</s:dict>
</s:key>
<s:key name="22222222-2222-2222-2222-222222222222">
<s:dict>
<s:key name="host_port_pair">myserver.splunk.com:6432</s:key>
<s:key name="peer">PEER2</s:key>
</s:dict>
</s:key>
<s:key name="33333333-3333-3333-3333-333333333333">
<s:dict>
<s:key name="host_port_pair">myserver.splunk.com:6433</s:key>
<s:key name="peer">PEER3</s:key>
</s:dict>
</s:key>
<s:key name="44444444-4444-4444-4444-444444444444">
<s:dict>
<s:key name="host_port_pair">myserver.splunk.com:6434</s:key>
<s:key name="peer">PEER4</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="pending_generation_id">6</s:key>
<s:key name="pending_last_attempt">0</s:key>
<s:key name="pending_last_reason"></s:key>
<s:key name="replication_factor_met">1</s:key>
<s:key name="search_factor_met">1</s:key>
<s:key name="was_forced">0</s:key>
</s:dict>
</content>
</entry>
cluster/master/generation/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/generation/master
XML Response
<title>clustermastergeneration</title>
<id>https://localhost:8089/services/cluster/master/generation</id>
<updated>2012-09-05T10:45:27-07:00</updated>
<generator build="136169" version="5.0"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>master</title>
<id>https://localhost:8089/services/cluster/master/generation/master</id>
<updated>2012-09-05T10:45:27-07:00</updated>
<link href="/services/cluster/master/generation/master" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/generation/master" rel="list"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
... eai:attributes node elided ...
<s:key name="generation_id">2</s:key>
<s:key name="generation_peers">
<s:dict>
<s:key name="2AF11DD4-1424-4A14-A522-FB9D055E9516">
<s:dict>
<s:key name="host_port_pair">splunks-ombra.sv.splunk.com:8389</s:key>
<s:key name="peer">splunks-ombra.sv.splunk.com</s:key>
</s:dict>
</s:key>
<s:key name="50FCDB42-E167-458D-A6A9-E4587E8F16D9">
<s:dict>
<s:key name="host_port_pair">splunks-ombra.sv.splunk.com:8189</s:key>
<s:key name="peer">splunks-ombra.sv.splunk.com</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="pending_generation_id">3</s:key>
<s:key name="pending_last_attempt">0</s:key>
<s:key name="pending_last_reason"></s:key>
</s:dict>
</content>
</entry>
cluster/master/generation/{name} POST
XML
XML Request
curl -k -u admin:pass https://myserver:8089/services/cluster/master/generation/foo -X POST -d generation_poll_interval=62 -d label=PEER2
XML Response
<title>clustermastergeneration</title>
<id>https://myserver:8089/services/cluster/master/generation</id>
<updated>2013-10-31T14:37:20-07:00</updated>
<generator build="184661" version="20131030"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/generation/_new" rel="create"/>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>master</title>
<id>https://myserver:8089/services/cluster/master/generation/master</id>
<updated>2013-10-31T14:37:20-07:00</updated>
<link href="/services/cluster/master/generation/master" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/generation/master" rel="list"/>
<link href="/services/cluster/master/generation/master" rel="edit"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="generation_id">5</s:key>
<s:key name="generation_peers">
<s:dict>
<s:key name="11111111-1111-1111-1111-111111111111">
<s:dict>
<s:key name="host_port_pair">myserver.splunk.com:6431</s:key>
<s:key name="peer">PEER1</s:key>
</s:dict>
</s:key>
<s:key name="22222222-2222-2222-2222-222222222222">
<s:dict>
<s:key name="host_port_pair">myserver.splunk.com:6432</s:key>
<s:key name="peer">PEER2</s:key>
</s:dict>
</s:key>
<s:key name="33333333-3333-3333-3333-333333333333">
<s:dict>
<s:key name="host_port_pair">myserver.splunk.com:6433</s:key>
<s:key name="peer">PEER3</s:key>
</s:dict>
</s:key>
<s:key name="44444444-4444-4444-4444-444444444444">
<s:dict>
<s:key name="host_port_pair">myserver.splunk.com:6434</s:key>
<s:key name="peer">PEER4</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="pending_generation_id">6</s:key>
<s:key name="pending_last_attempt">0</s:key>
<s:key name="pending_last_reason"></s:key>
<s:key name="replication_factor_met">1</s:key>
<s:key name="search_factor_met">1</s:key>
<s:key name="was_forced">0</s:key>
</s:dict>
</content>
</entry>
cluster/master/indexes GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/indexes
XML Response
<title>clustermasterpeerindexes</title>
<id>https://localhost:8089/services/cluster/master/indexes</id>
<updated>2014-04-17T19:11:14+00:00</updated>
<generator build="204899" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<opensearch:totalResults>2</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>_audit</title>
<id>https://localhost:8089/services/cluster/master/indexes/_audit</id>
<updated>2014-04-17T19:11:14+00:00</updated>
<link href="/services/cluster/master/indexes/_audit" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/indexes/_audit" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="buckets_with_excess_copies">0</s:key>
<s:key name="buckets_with_excess_searchable_copies">0</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="index_size">284975</s:key>
<s:key name="is_searchable">1</s:key>
<s:key name="non_site_aware_buckets_in_site_aware_cluster">6</s:key>
<s:key name="num_buckets">12</s:key>
<s:key name="replicated_copies_tracker">
<s:dict>
<s:key name="0">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
<s:key name="1">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
<s:key name="2">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="searchable_copies_tracker">
<s:dict>
<s:key name="0">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
<s:key name="1">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="sort_order">4294967295</s:key>
<s:key name="total_excess_bucket_copies">0</s:key>
<s:key name="total_excess_searchable_copies">0</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>_internal</title>
<id>https://localhost:8089/services/cluster/master/indexes/_internal</id>
<updated>2014-04-17T19:11:14+00:00</updated>
<link href="/services/cluster/master/indexes/_internal" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/indexes/_internal" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="buckets_with_excess_copies">0</s:key>
<s:key name="buckets_with_excess_searchable_copies">0</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="index_size">1190869</s:key>
<s:key name="is_searchable">1</s:key>
<s:key name="non_site_aware_buckets_in_site_aware_cluster">6</s:key>
<s:key name="num_buckets">12</s:key>
<s:key name="replicated_copies_tracker">
<s:dict>
<s:key name="0">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
<s:key name="1">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
<s:key name="2">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="searchable_copies_tracker">
<s:dict>
<s:key name="0">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
<s:key name="1">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="sort_order">4294967295</s:key>
<s:key name="total_excess_bucket_copies">0</s:key>
<s:key name="total_excess_searchable_copies">0</s:key>
</s:dict>
</content>
</entry>
cluster/master/indexes/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/indexes/_audit
XML Response
<title>clustermasterpeerindexes</title>
<id>https://localhost:8089/services/cluster/master/indexes</id>
<updated>2014-04-17T19:11:14+00:00</updated>
<generator build="204899" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<opensearch:totalResults>2</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>_audit</title>
<id>https://localhost:8089/services/cluster/master/indexes/_audit</id>
<updated>2014-04-17T19:11:14+00:00</updated>
<link href="/services/cluster/master/indexes/_audit" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/indexes/_audit" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="buckets_with_excess_copies">0</s:key>
<s:key name="buckets_with_excess_searchable_copies">0</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="index_size">284975</s:key>
<s:key name="is_searchable">1</s:key>
<s:key name="non_site_aware_buckets_in_site_aware_cluster">6</s:key>
<s:key name="num_buckets">12</s:key>
<s:key name="replicated_copies_tracker">
<s:dict>
<s:key name="0">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
<s:key name="1">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
<s:key name="2">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="searchable_copies_tracker">
<s:dict>
<s:key name="0">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
<s:key name="1">
<s:dict>
<s:key name="actual_copies_per_slot">12</s:key>
<s:key name="expected_total_per_slot">12</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="sort_order">4294967295</s:key>
<s:key name="total_excess_bucket_copies">0</s:key>
<s:key name="total_excess_searchable_copies">0</s:key>
</s:dict>
</content>
</entry>
cluster/master/info GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/info
XML Response
<title>clustermasterinfo</title>
<id>http://greentea.sv.splunk.com:8089/services/cluster/master/info</id>
<updated>2013-07-23T10:36:35-07:00</updated>
<generator build="172635" version="6.0"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>master</title>
<id>http://greentea.sv.splunk.com:8089/services/cluster/master/info/master</id>
<updated>2013-07-23T10:36:35-07:00</updated>
<link href="/services/cluster/master/info/master" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/info/master" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="active_bundle">
<s:dict>
<s:key name="bundle_path">/home/eserv/schoi/apple_master/splunk/var/run/splunk/cluster/remote-bundle/66e383cafa8ff1f033e2341e35fc2e09-1374594357.bundle</s:key>
<s:key name="checksum">a98f211c7bc6b141bd4fe5775c7cd193</s:key>
<s:key name="timestamp">1374594357</s:key>
</s:dict>
</s:key>
<s:key name="bundle_creation_time_on_master">1374594357</s:key>
<s:key name="bundle_validation_errors_on_master">
<s:list/>
</s:key>
<s:key name="bundle_validation_in_progress">0</s:key>
<s:key name="bundle_validation_on_master_succeeded">1</s:key>
<s:key name="data_safety_buckets_to_fix">
<s:dict>
<s:key name="_internal~1~05BB0AAC-61A5-491B-9153-3B02E6DA6130">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">resolved initial state</s:key>
<s:key name="timestamp">1374594631</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason"></s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="_internal~1~76AFDA4D-DAA7-48A8-A738-DD669A0853CD">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">resolved initial state</s:key>
<s:key name="timestamp">1374594631</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason"></s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
.
.
.
elided
.
.
.
<s:key name="i5~659~8CEAE4B4-BAB0-415E-9DA6-0438ECD8B3EF">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">streaming success</s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason">streaming success</s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
... eai:acl node elided ...
<s:key name="gen_commit_buckets_to_fix">
<s:dict>
<s:key name="_internal~1~05BB0AAC-61A5-491B-9153-3B02E6DA6130">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">resolved initial state</s:key>
<s:key name="timestamp">1374594631</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason"></s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="_internal~1~76AFDA4D-DAA7-48A8-A738-DD669A0853CD">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">resolved initial state</s:key>
<s:key name="timestamp">1374594631</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason"></s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
.
.
.
elided
.
.
.
<s:key name="i5~659~8CEAE4B4-BAB0-415E-9DA6-0438ECD8B3EF">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">streaming success</s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason">streaming success</s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="indexing_ready_flag">1</s:key>
<s:key name="initialized_flag">1</s:key>
<s:key name="label">master_nc</s:key>
<s:key name="latest_bundle">
<s:dict>
<s:key name="bundle_path">/home/eserv/schoi/apple_master/splunk/var/run/splunk/cluster/remote-bundle/66e383cafa8ff1f033e2341e35fc2e09-1374594357.bundle</s:key>
<s:key name="checksum">a98f211c7bc6b141bd4fe5775c7cd193</s:key>
<s:key name="timestamp">1374594357</s:key>
</s:dict>
</s:key>
<s:key name="maintenance_mode">0</s:key>
<s:key name="reload_bundle_issued">0</s:key>
<s:key name="rep_count_buckets_to_fix">
<s:dict>
<s:key name="_internal~1~05BB0AAC-61A5-491B-9153-3B02E6DA6130">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">resolved initial state</s:key>
<s:key name="timestamp">1374594631</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason"></s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="_internal~1~76AFDA4D-DAA7-48A8-A738-DD669A0853CD">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">resolved initial state</s:key>
<s:key name="timestamp">1374594631</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason"></s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
.
.
.
elided
.
.
.
<s:key name="i5~659~8CEAE4B4-BAB0-415E-9DA6-0438ECD8B3EF">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">streaming success</s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason">streaming success</s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="rolling_restart_flag">0</s:key>
<s:key name="search_count_buckets_to_fix">
<s:dict>
<s:key name="_internal~1~05BB0AAC-61A5-491B-9153-3B02E6DA6130">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">resolved initial state</s:key>
<s:key name="timestamp">1374594631</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason"></s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="_internal~1~76AFDA4D-DAA7-48A8-A738-DD669A0853CD">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">resolved initial state</s:key>
<s:key name="timestamp">1374594631</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason"></s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
.
.
.
elided
.
.
.
<s:key name="i5~659~8CEAE4B4-BAB0-415E-9DA6-0438ECD8B3EF">
<s:dict>
<s:key name="initial">
<s:dict>
<s:key name="reason">streaming success</s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
<s:key name="latest">
<s:dict>
<s:key name="reason">streaming success</s:key>
<s:key name="timestamp">1374600995</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="service_ready_flag">1</s:key>
<s:key name="start_time">1374594571</s:key>
</s:dict>
</content>
</entry>
cluster/master/peers GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/peers
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustermasterpeers</title>
<id>https://localhost:8089/services/cluster/master/peers</id>
<updated>2014-04-17T19:17:08+00:00</updated>
<generator build="204899" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/peers/_new" rel="create"/>
<opensearch:totalResults>6</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>238C3311-F0A4-4A9B-97F0-53667CFFEEAB</title>
<id>https://localhost:8089/services/cluster/master/peers/238C3311-F0A4-4A9B-97F0-53667CFFEEAB</id>
<updated>2014-04-17T19:17:08+00:00</updated>
<link href="/services/cluster/master/peers/238C3311-F0A4-4A9B-97F0-53667CFFEEAB" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/peers/238C3311-F0A4-4A9B-97F0-53667CFFEEAB" rel="list"/>
<link href="/services/cluster/master/peers/238C3311-F0A4-4A9B-97F0-53667CFFEEAB" rel="edit"/>
<content type="text/xml">
<s:dict>
<s:key name="active_bundle_id">4708B74780A1E5101449548B1E103616</s:key>
<s:key name="apply_bundle_status">
<s:dict>
<s:key name="invalid_bundle">
<s:dict>
<s:key name="bundle_validation_errors">
<s:list/>
</s:key>
<s:key name="invalid_bundle_id"></s:key>
</s:dict>
</s:key>
<s:key name="reload_error"></s:key>
<s:key name="restart_required_for_apply_bundle">0</s:key>
</s:dict>
</s:key>
<s:key name="base_generation_id">6</s:key>
<s:key name="bucket_count">10</s:key>
<s:key name="bucket_count_by_index">
<s:dict>
<s:key name="_audit">5</s:key>
<s:key name="_internal">5</s:key>
</s:dict>
</s:key>
<s:key name="delayed_buckets_to_discard">
<s:list/>
</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="fixup_set">
<s:list/>
</s:key>
<s:key name="heartbeat_started">1</s:key>
<s:key name="host_port_pair">127.0.1.1:8096</s:key>
<s:key name="is_searchable">1</s:key>
<s:key name="label">s2p3</s:key>
<s:key name="last_heartbeat">1397762228</s:key>
<s:key name="latest_bundle_id">4708B74780A1E5101449548B1E103616</s:key>
<s:key name="pending_job_count">0</s:key>
<s:key name="primary_count">5</s:key>
<s:key name="primary_count_remote">2</s:key>
<s:key name="replication_count">0</s:key>
<s:key name="replication_port">9905</s:key>
<s:key name="replication_use_ssl">0</s:key>
<s:key name="search_state_counter">
<s:dict>
<s:key name="Searchable">5</s:key>
<s:key name="SearchablePendingMask">0</s:key>
<s:key name="Unsearchable">5</s:key>
</s:dict>
</s:key>
<s:key name="site">site2</s:key>
<s:key name="status">Up</s:key>
<s:key name="status_counter">
<s:dict>
<s:key name="Complete">6</s:key>
<s:key name="NonStreamingTarget">0</s:key>
<s:key name="StreamingSource">2</s:key>
<s:key name="StreamingTarget">2</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
.
.
.
elided
.
.
.
<entry>
<title>E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C</title>
<id>https://localhost:8089/services/cluster/master/peers/E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C</id>
<updated>2014-04-17T19:17:08+00:00</updated>
<link href="/services/cluster/master/peers/E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/peers/E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C" rel="list"/>
<link href="/services/cluster/master/peers/E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C" rel="edit"/>
<content type="text/xml">
<s:dict>
<s:key name="active_bundle_id">4708B74780A1E5101449548B1E103616</s:key>
<s:key name="apply_bundle_status">
<s:dict>
<s:key name="invalid_bundle">
<s:dict>
<s:key name="bundle_validation_errors">
<s:list/>
</s:key>
<s:key name="invalid_bundle_id"></s:key>
</s:dict>
</s:key>
<s:key name="reload_error"></s:key>
<s:key name="restart_required_for_apply_bundle">0</s:key>
</s:dict>
</s:key>
<s:key name="base_generation_id">4</s:key>
<s:key name="bucket_count">13</s:key>
<s:key name="bucket_count_by_index">
<s:dict>
<s:key name="_audit">6</s:key>
<s:key name="_internal">7</s:key>
</s:dict>
</s:key>
<s:key name="delayed_buckets_to_discard">
<s:list/>
</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="fixup_set">
<s:list/>
</s:key>
<s:key name="heartbeat_started">1</s:key>
<s:key name="host_port_pair">127.0.1.1:8094</s:key>
<s:key name="is_searchable">1</s:key>
<s:key name="label">s2p1</s:key>
<s:key name="last_heartbeat">1397762227</s:key>
<s:key name="latest_bundle_id">4708B74780A1E5101449548B1E103616</s:key>
<s:key name="pending_job_count">0</s:key>
<s:key name="primary_count">7</s:key>
<s:key name="primary_count_remote">2</s:key>
<s:key name="replication_count">0</s:key>
<s:key name="replication_port">9903</s:key>
<s:key name="replication_use_ssl">0</s:key>
<s:key name="search_state_counter">
<s:dict>
<s:key name="PendingSearchable">0</s:key>
<s:key name="Searchable">10</s:key>
<s:key name="SearchablePendingMask">0</s:key>
<s:key name="Unsearchable">3</s:key>
</s:dict>
</s:key>
<s:key name="site">site2</s:key>
<s:key name="status">Up</s:key>
<s:key name="status_counter">
<s:dict>
<s:key name="Complete">6</s:key>
<s:key name="NonStreamingTarget">0</s:key>
<s:key name="StreamingSource">2</s:key>
<s:key name="StreamingTarget">5</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
cluster/master/peers/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/peers/29F9560E-A44A-425C-8753-1C6158B46C84
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustermasterpeers</title>
<id>https://localhost:8089/services/cluster/master/peers</id>
<updated>2014-04-17T19:18:19+00:00</updated>
<generator build="204899" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/master/peers/_new" rel="create"/>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>29F9560E-A44A-425C-8753-1C6158B46C84</title>
<id>https://localhost:8089/services/cluster/master/peers/29F9560E-A44A-425C-8753-1C6158B46C84</id>
<updated>2014-04-17T19:18:19+00:00</updated>
<link href="/services/cluster/master/peers/29F9560E-A44A-425C-8753-1C6158B46C84" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/peers/29F9560E-A44A-425C-8753-1C6158B46C84" rel="list"/>
<link href="/services/cluster/master/peers/29F9560E-A44A-425C-8753-1C6158B46C84" rel="edit"/>
<content type="text/xml">
<s:dict>
<s:key name="active_bundle_id">4708B74780A1E5101449548B1E103616</s:key>
<s:key name="apply_bundle_status">
<s:dict>
<s:key name="invalid_bundle">
<s:dict>
<s:key name="bundle_validation_errors">
<s:list/>
</s:key>
<s:key name="invalid_bundle_id"></s:key>
</s:dict>
</s:key>
<s:key name="reload_error"></s:key>
<s:key name="restart_required_for_apply_bundle">0</s:key>
</s:dict>
</s:key>
<s:key name="base_generation_id">3</s:key>
<s:key name="bucket_count">11</s:key>
<s:key name="bucket_count_by_index">
<s:dict>
<s:key name="_audit">6</s:key>
<s:key name="_internal">5</s:key>
</s:dict>
</s:key>
<s:key name="delayed_buckets_to_discard">
<s:list/>
</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="eai:attributes">
... elided ...
</s:key>
<s:key name="fixup_set">
<s:list/>
</s:key>
<s:key name="heartbeat_started">1</s:key>
<s:key name="host_port_pair">127.0.1.1:8092</s:key>
<s:key name="is_searchable">1</s:key>
<s:key name="label">s1p3</s:key>
<s:key name="last_heartbeat">1397762298</s:key>
<s:key name="latest_bundle_id">4708B74780A1E5101449548B1E103616</s:key>
<s:key name="pending_job_count">0</s:key>
<s:key name="primary_count">6</s:key>
<s:key name="primary_count_remote">2</s:key>
<s:key name="replication_count">0</s:key>
<s:key name="replication_port">9902</s:key>
<s:key name="replication_use_ssl">0</s:key>
<s:key name="search_state_counter">
<s:dict>
<s:key name="PendingSearchable">0</s:key>
<s:key name="Searchable">8</s:key>
<s:key name="SearchablePendingMask">0</s:key>
<s:key name="Unsearchable">3</s:key>
</s:dict>
</s:key>
<s:key name="site">site1</s:key>
<s:key name="status">Up</s:key>
<s:key name="status_counter">
<s:dict>
<s:key name="Complete">6</s:key>
<s:key name="NonStreamingTarget">0</s:key>
<s:key name="StreamingSource">2</s:key>
<s:key name="StreamingTarget">3</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
cluster/master/sites GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/sites
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustermastersites</title>
<id>https://localhost:8089/services/cluster/master/sites</id>
<updated>2014-04-17T19:12:15+00:00</updated>
<generator build="204899" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<opensearch:totalResults>2</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>site1</title>
<id>https://localhost:8089/services/cluster/master/sites/site1</id>
<updated>2014-04-17T19:12:15+00:00</updated>
<link href="/services/cluster/master/sites/site1" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/sites/site1" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="peers">
<s:dict>
<s:key name="29F9560E-A44A-425C-8753-1C6158B46C84">
<s:dict>
<s:key name="host_port_pair">127.0.1.1:8092</s:key>
<s:key name="server_name">s1p3</s:key>
</s:dict>
</s:key>
<s:key name="61666763-43E9-411B-9464-D80A5119EF0E">
<s:dict>
<s:key name="host_port_pair">127.0.1.1:8091</s:key>
<s:key name="server_name">s1p2</s:key>
</s:dict>
</s:key>
<s:key name="76C88808-2727-42B4-8C05-72DC44630FE4">
<s:dict>
<s:key name="host_port_pair">127.0.1.1:8090</s:key>
<s:key name="server_name">s1p1</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>site2</title>
<id>https://localhost:8089/services/cluster/master/sites/site2</id>
<updated>2014-04-17T19:12:15+00:00</updated>
<link href="/services/cluster/master/sites/site2" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/sites/site2" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="peers">
<s:dict>
<s:key name="238C3311-F0A4-4A9B-97F0-53667CFFEEAB">
<s:dict>
<s:key name="host_port_pair">127.0.1.1:8096</s:key>
<s:key name="server_name">s2p3</s:key>
</s:dict>
</s:key>
<s:key name="C878FADC-513D-4BDD-BA48-F25BB82FE565">
<s:dict>
<s:key name="host_port_pair">127.0.1.1:8095</s:key>
<s:key name="server_name">s2p2</s:key>
</s:dict>
</s:key>
<s:key name="E4B2C5E4-0961-4F3A-A5F7-C3A4BB6B518C">
<s:dict>
<s:key name="host_port_pair">127.0.1.1:8094</s:key>
<s:key name="server_name">s2p1</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
cluster/master/sites/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/master/sites/site1
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustermastersites</title>
<id>https://localhost:8089/services/cluster/master/sites</id>
<updated>2014-04-17T19:13:07+00:00</updated>
<generator build="204899" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>site1</title>
<id>https://localhost:8089/services/cluster/master/sites/site1</id>
<updated>2014-04-17T19:13:07+00:00</updated>
<link href="/services/cluster/master/sites/site1" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/master/sites/site1" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="eai:attributes">
... elided ...
</s:key>
<s:key name="peers">
<s:dict>
<s:key name="29F9560E-A44A-425C-8753-1C6158B46C84">
<s:dict>
<s:key name="host_port_pair">127.0.1.1:8092</s:key>
<s:key name="server_name">s1p3</s:key>
</s:dict>
</s:key>
<s:key name="61666763-43E9-411B-9464-D80A5119EF0E">
<s:dict>
<s:key name="host_port_pair">127.0.1.1:8091</s:key>
<s:key name="server_name">s1p2</s:key>
</s:dict>
</s:key>
<s:key name="76C88808-2727-42B4-8C05-72DC44630FE4">
<s:dict>
<s:key name="host_port_pair">127.0.1.1:8090</s:key>
<s:key name="server_name">s1p1</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
cluster/searchhead/generation GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/searchhead/generation
XML Response
<feed xmlns="http://www.w3.org/2005/Atom"
xmlns:s="http://dev.splunk.com/ns/rest"
xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustersearchheadgeneration</title>
<id>https://localhost:8089/services/cluster/searchhead/generation</id>
<updated>2012-09-05T11:13:45-07:00</updated>
<generator build="136169" version="5.0"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>master</title>
<id>https://localhost:8089/services/cluster/searchhead/generation/master</id>
<updated>2012-09-05T11:13:45-07:00</updated>
<link href="/services/cluster/searchhead/generation/master" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/searchhead/generation/master" rel="list"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="generation_id">2</s:key>
<s:key name="generation_peers">
<s:dict>
<s:key name="2AF11DD4-1424-4A14-A522-FB9D055E9516">
<s:dict>
<s:key name="host_port_pair">splunks-ombra.sv.splunk.com:8389</s:key>
<s:key name="peer">splunks-ombra.sv.splunk.com</s:key>
</s:dict>
</s:key>
<s:key name="50FCDB42-E167-458D-A6A9-E4587E8F16D9">
<s:dict>
<s:key name="host_port_pair">splunks-ombra.sv.splunk.com:8189</s:key>
<s:key name="peer">splunks-ombra.sv.splunk.com</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
cluster/searchhead/generation/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/searchhead/generation/https%3A%252F%252Fmyserver-mbp15.sv.splunk.com%3A8989
XML Response
<feed xmlns="http://www.w3.org/2005/Atom"
xmlns:s="http://dev.splunk.com/ns/rest"
xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustersearchheadgeneration</title>
<id>https://localhost:53791/services/cluster/searchhead/generation</id>
<updated>2012-09-07T14:11:59-07:00</updated>
<generator build="136859" version="20120906"/>
<author>
<name>Splunk</name>
</author>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>https://ronnie.splunk.com:53112</title>
<id>https://localhost:53791/services/cluster/searchhead/generation/https%3A%252F%252Fronnie.splunk.com%3A53112</id>
<updated>2012-09-07T14:11:59-07:00</updated>
<link href="/services/cluster/searchhead/generation/https%3A%252F%252Fronnie.splunk.com%3A53112" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/searchhead/generation/https%3A%252F%252Fronnie.splunk.com%3A53112" rel="list"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
... eai:attributes node elided ...
<s:key name="generation_id">3</s:key>
<s:key name="generation_peers">
<s:dict>
<s:key name="33333333-3333-3333-3333-333333333333">
<s:dict>
<s:key name="host_port_pair">10.1.42.3:53309</s:key>
<s:key name="peer">peer3</s:key>
</s:dict>
</s:key>
<s:key name="44444444-4444-4444-4444-444444444444">
<s:dict>
<s:key name="host_port_pair">10.1.42.3:53411</s:key>
<s:key name="peer">peer4</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
cluster/searchhead/searchheadconfig GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/cluster/searchhead/searchheadconfig
XML Response
<feed xmlns="http://www.w3.org/2005/Atom"
xmlns:s="http://dev.splunk.com/ns/rest"
xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustersearchheadconfig</title>
<id>https://localhost:8089/services/cluster/searchhead/searchheadconfig</id>
<updated>2013-10-31T14:04:45-07:00</updated>
<generator build="184661" version="20131030"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/searchhead/searchheadconfig/_new" rel="create"/>
<link href="/services/cluster/searchhead/searchheadconfig/_reload" rel="_reload"/>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>https://localhost:4567</title>
<id>https://myserver:7588/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567</id>
<updated>2013-10-31T14:04:45-07:00</updated>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="list"/>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567/_reload" rel="_reload"/>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="edit"/>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="remove"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="master_uri">https://localhost:4567</s:key>
<s:key name="secret">********</s:key>
</s:dict>
</content>
</entry>
</feed>
cluster/searchhead/searchheadconfig POST
XML
XML Request
curl -k -u admin:pass https://myserver:8089/services/cluster/searchhead/searchheadconfig -d name=https://myserver:4567 -d secret=testsecret
XML Response
<feed xmlns="http://www.w3.org/2005/Atom"
xmlns:s="http://dev.splunk.com/ns/rest"
xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustersearchheadconfig</title>
<id>https://localhost:8089/services/cluster/searchhead/searchheadconfig</id>
<updated>2013-10-31T14:04:45-07:00</updated>
<generator build="184661" version="20131030"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/searchhead/searchheadconfig/_new" rel="create"/>
<link href="/services/cluster/searchhead/searchheadconfig/_reload" rel="_reload"/>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>https://localhost:4567</title>
<id>https://myserver:8089/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567</id>
<updated>2013-10-31T14:04:45-07:00</updated>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="list"/>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567/_reload" rel="_reload"/>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="edit"/>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="remove"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="master_uri">https://localhost:4567</s:key>
<s:key name="secret">********</s:key>
</s:dict>
</content>
</entry>
</feed>
cluster/searchhead/searchheadconfig/{name} DELETE
XML
XML Request
curl -k -u admin:changeme --request DELETE https://myserver.splunk.com:8089/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Fmyserver%3A8211
XML Response
<feed xmlns="http://www.w3.org/2005/Atom"
xmlns:s="http://dev.splunk.com/ns/rest"
xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustersearchheadconfig</title>
<id>https://myserver.splunk.com:8089/services/cluster/searchhead/searchheadconfig</id>
<updated>2013-11-05T14:34:42-08:00</updated>
<generator build="184986" version="20131101"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/searchhead/searchheadconfig/_new" rel="create"/>
<link href="/services/cluster/searchhead/searchheadconfig/_reload" rel="_reload"/>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
</feed>
cluster/searchhead/searchheadconfig/{name} GET
XML
XML Request
curl -k -u admin:pass https://myserver.splunk.com:7588/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567
XML Response
<feed xmlns="http://www.w3.org/2005/Atom"
xmlns:s="http://dev.splunk.com/ns/rest"
xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clustersearchheadconfig</title>
<id>https://myserver.splunk.com:8089/services/cluster/searchhead/searchheadconfig</id>
<updated>2013-11-05T14:43:00-08:00</updated>
<generator build="184986" version="20131101"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/searchhead/searchheadconfig/_new" rel="create"/>
<link href="/services/cluster/searchhead/searchheadconfig/_reload" rel="_reload"/>
... openserch nodes elided ...
<s:messages/>
<entry>
<title>https://localhost:4567</title>
<id>https://myserver.splunk.com:7588/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567</id>
<updated>2013-11-05T14:43:00-08:00</updated>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="list"/>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567/_reload" rel="_reload"/>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="edit"/>
<link href="/services/cluster/searchhead/searchheadconfig/https%3A%252F%252Flocalhost%3A4567" rel="remove"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">1</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>admin</s:item>
<s:item>splunk-system-role</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>admin</s:item>
<s:item>splunk-system-role</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
<s:key name="eai:attributes">
<s:dict>
<s:key name="optionalFields">
<s:list>
<s:item>master_uri</s:item>
<s:item>secret</s:item>
</s:list>
</s:key>
<s:key name="requiredFields">
<s:list/>
</s:key>
<s:key name="wildcardFields">
<s:list/>
</s:key>
</s:dict>
</s:key>
<s:key name="master_uri">https://localhost:4567</s:key>
<s:key name="secret">********</s:key>
</s:dict>
</content>
</entry>
</feed>
cluster/slave/buckets GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/cluster/slave/buckets
XML Response
<feed xmlns="http://www.w3.org/2005/Atom"
xmlns:s="http://dev.splunk.com/ns/rest"
xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clusterslavebuckets</title>
<id>https://localhost:8189/services/cluster/slave/buckets</id>
<updated>2012-09-05T12:29:42-07:00</updated>
<generator build="136169" version="5.0"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>_audit~0~2AF11DD4-1424-4A14-A522-FB9D055E9516</title>
<id>https://localhost:8189/services/cluster/slave/buckets/_audit~0~2AF11DD4-1424-4A14-A522-FB9D055E9516</id>
<updated>2012-09-05T12:29:42-07:00</updated>
<link href="/services/cluster/slave/buckets/_audit~0~2AF11DD4-1424-4A14-A522-FB9D055E9516" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/slave/buckets/_audit~0~2AF11DD4-1424-4A14-A522-FB9D055E9516" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="checksum"></s:key>
... eai:acl node elided ...
<s:key name="earliest_time">1346859162</s:key>
<s:key name="generations">
<s:dict>
<s:key name="0">0x0</s:key>
</s:dict>
</s:key>
<s:key name="latest_time">1346859257</s:key>
<s:key name="search_state">Searchable</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</content>
</entry>
. . . elided ...
</feed>
cluster/slave/buckets/{name} DELETE
XML
XML Request
curl -k -u admin:pass --request DELETE https://myserver:8089/services/cluster/slave/buckets/_internal~58~11111111-1111-1111-1111-111111111111 -d bucket_id="_internal~58~11111111-1111-1111-1111-111111111111"
XML Response
<feed xmlns="http://www.w3.org/2005/Atom"
xmlns:s="http://dev.splunk.com/ns/rest"
xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>clusterslavebuckets</title>
<id>https://myserver:8089/services/cluster/slave/buckets</id>
<updated>2013-10-31T14:48:18-07:00</updated>
<generator build="184661" version="20131030"/>
<author>
<name>Splunk</name>
</author>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
</feed>
cluster/slave/buckets/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/cluster/slave/buckets/_audit~0~B8B5E5C6-DB26-4952-AFB1-C5EFEFFFEA31
XML Response
.
.
.
<title>clusterslavebuckets</title>
<id>https://localhost:8189/services/cluster/slave/buckets</id>
<updated>2012-09-05T12:40:43-07:00</updated>
<generator build="136169" version="5.0"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>_internal~1~50FCDB42-E167-458D-A6A9-E4587E8F16D9</title>
<id>https://localhost:8189/services/cluster/slave/buckets/_internal~1~50FCDB42-E167-458D-A6A9-E4587E8F16D9</id>
<updated>2012-09-05T12:40:43-07:00</updated>
<link href="/services/cluster/slave/buckets/_internal~1~50FCDB42-E167-458D-A6A9-E4587E8F16D9" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/slave/buckets/_internal~1~50FCDB42-E167-458D-A6A9-E4587E8F16D9" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="checksum"></s:key>
... eai:acl node elided ...
<s:key name="eai:attributes">
<s:dict>
<s:key name="optionalFields">
<s:list/>
</s:key>
<s:key name="requiredFields">
<s:list/>
</s:key>
<s:key name="wildcardFields">
<s:list/>
</s:key>
</s:dict>
</s:key>
<s:key name="earliest_time">0</s:key>
<s:key name="generations">
<s:dict>
<s:key name="0">0xffffffffffffffff</s:key>
</s:dict>
</s:key>
<s:key name="latest_time">0</s:key>
<s:key name="search_state">Searchable</s:key>
<s:key name="status">StreamingSource</s:key>
</s:dict>
</content>
</entry>
cluster/slave/control/control/re-add-peer POST
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/cluster/slave/control/control/re-add-peer -d clearMasks=false -X POST
XML Response
<title>clusterslavecontrol</title>
<id>https://localhost:8089/services/cluster/slave/control</id>
<updated>2015-11-06T18:08:54-08:00</updated>
<generator build="802b4ea159bb584c629dcdb8ba57c409b1d5b7ab" version="20151030"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/slave/control/_acl" rel="_acl"/>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
cluster/slave/control/control/set_detention_override POST
XML
XML Request
curl -k -u admin:changeme https://SLAVE:MGMT_PORT/services/cluster/slave/control/control/set_detention_override -d value=false -X POST
XML Response
.
.
.
<title>clusterslavecontrol</title>
<id>https://SLAVE:MGMT_PORT/services/cluster/slave/control</id>
<updated>2015-08-11T16:24:32-07:00</updated>
<generator build="8826868e4a29e7db785ebbafaac596e32f570382" version="20150805"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/cluster/slave/control/_acl" rel="_acl"/>
<opensearch:totalResults>0</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
cluster/slave/info GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/cluster/slave/info
XML Response
.
.
.
<title>clusterslaveinfo</title>
<id>https://localhost:8189/services/cluster/slave/info</id>
<updated>2012-09-05T12:45:59-07:00</updated>
<generator build="136169" version="5.0"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>slave</title>
<id>https://localhost:8189/services/cluster/slave/info/slave</id>
<updated>2012-09-05T12:45:59-07:00</updated>
<link href="/services/cluster/slave/info/slave" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/cluster/slave/info/slave" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="active_bundle">
<s:dict>
<s:key name="bundle_path">/Applications/splunk-peer/var/run/splunk/cluster/remote-bundle/0f6078895127ab1f715ee78a6e1ff8a1-1346858928.bundle</s:key>
<s:key name="checksum">36a883f4d47af66f78531ef474349b59</s:key>
<s:key name="timestamp">1346858928</s:key>
</s:dict>
</s:key>
<s:key name="base_generation_id">2</s:key>
... eai:acl node elided ...
<s:key name="invalid_bundle_ids">
<s:list/>
</s:key>
<s:key name="is_registered">1</s:key>
<s:key name="last_heartbeat_attempt">1346874358</s:key>
<s:key name="latest_bundle">
<s:dict>
<s:key name="bundle_path">/Applications/splunk-peer/var/run/splunk/cluster/remote-bundle/0f6078895127ab1f715ee78a6e1ff8a1-1346858928.bundle</s:key>
<s:key name="checksum">36a883f4d47af66f78531ef474349b59</s:key>
<s:key name="timestamp">1346858928</s:key>
</s:dict>
</s:key>
<s:key name="restart_state">NoRestart</s:key>
<s:key name="status">Up</s:key>
</s:dict>
</content>
</entry>
shcluster/captain/artifacts GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/captain/artifacts
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>shclustercaptainartifacts</title>
<id>https://localhost:8089/services/shcluster/captain/artifacts</id>
<updated>2014-10-15T08:44:41-07:00</updated>
<generator build="235980" version="20141014"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/shcluster/captain/artifacts/_new" rel="create"/>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888</title>
<id>https://localhost:8089/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-15T08:44:41-07:00</updated>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888" rel="remove"/>
<content type="text/xml">
<s:dict>
<s:key name="artifact_size">282624</s:key>
... eai:acl node elided ...
<s:key name="origin_guid">88888888-8888-8888-8888-888888888888</s:key>
<s:key name="peers">
<s:dict>
<s:key name="88888888-8888-8888-8888-888888888888">
<s:dict>
<s:key name="directory_path">/home/svasan/splunk/searchhead/var/run/splunk/dispatch/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
<s:key name="99999999-9999-9999-9999-999999999999">
<s:dict>
<s:key name="directory_path">/home/svasan/splunk/dash/var/run/splunk/dispatch/rsa_scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="service_after_time">0</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888</title>
<id>https://localhost:8089/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-15T08:44:41-07:00</updated>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888" rel="remove"/>
<content type="text/xml">
<s:dict>
<s:key name="artifact_size">282624</s:key>
... eai:acl node elided ...
<s:key name="origin_guid">88888888-8888-8888-8888-888888888888</s:key>
<s:key name="peers">
<s:dict>
<s:key name="88888888-8888-8888-8888-888888888888">
<s:dict>
<s:key name="directory_path">/home/svasan/splunk/searchhead/var/run/splunk/dispatch/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
<s:key name="99999999-9999-9999-9999-999999999999">
<s:dict>
<s:key name="directory_path">/home/svasan/splunk/dash/var/run/splunk/dispatch/rsa_scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="service_after_time">0</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387300_288_88888888-8888-8888-8888-888888888888</title>
<id>https://localhost:8089/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387300_288_88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-15T08:44:41-07:00</updated>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387300_288_88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387300_288_88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387300_288_88888888-8888-8888-8888-888888888888" rel="remove"/>
<content type="text/xml">
<s:dict>
<s:key name="artifact_size">253952</s:key>
... eai:acl node elided ...
<s:key name="origin_guid">88888888-8888-8888-8888-888888888888</s:key>
<s:key name="peers">
<s:dict>
<s:key name="88888888-8888-8888-8888-888888888888">
<s:dict>
<s:key name="directory_path">/home/svasan/splunk/searchhead/var/run/splunk/dispatch/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387300_288_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
<s:key name="99999999-9999-9999-9999-999999999999">
<s:dict>
<s:key name="directory_path">/home/svasan/splunk/dash/var/run/splunk/dispatch/rsa_scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387300_288_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="service_after_time">0</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387600_289_88888888-8888-8888-8888-888888888888</title>
<id>https://localhost:8089/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387600_289_88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-15T08:44:41-07:00</updated>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387600_289_88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387600_289_88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/captain/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387600_289_88888888-8888-8888-8888-888888888888" rel="remove"/>
<content type="text/xml">
<s:dict>
<s:key name="artifact_size">253952</s:key>
... eai:acl node elided ...
<s:key name="origin_guid">88888888-8888-8888-8888-888888888888</s:key>
<s:key name="peers">
<s:dict>
<s:key name="88888888-8888-8888-8888-888888888888">
<s:dict>
<s:key name="directory_path">/home/svasan/splunk/searchhead/var/run/splunk/dispatch/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387600_289_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
<s:key name="99999999-9999-9999-9999-999999999999">
<s:dict>
<s:key name="directory_path">/home/svasan/splunk/dash/var/run/splunk/dispatch/rsa_scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387600_289_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="status">Complete</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="service_after_time">0</s:key>
</s:dict>
</content>
</entry>
</feed>
shcluster/captain/artifacts/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/captain/artifacts/{name}
XML Response
shcluster/captain/info GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/captain/info
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>shclustercaptaininfo</title>
<id>https://localhost:8089/services/shcluster/captain/info</id>
<updated>2014-10-15T08:45:25-07:00</updated>
<generator build="235980" version="20141014"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>captain</title>
<id>https://localhost:8089/services/shcluster/captain/info/captain</id>
<updated>2014-10-15T08:45:25-07:00</updated>
<link href="/services/shcluster/captain/info/captain" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/info/captain" rel="list"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="elected_captain">1413307273</s:key>
<s:key name="id">BB3116C0-73B9-459A-B473-254A18A69776</s:key>
<s:key name="initialized_flag">1</s:key>
<s:key name="label">searchhead</s:key>
<s:key name="maintenance_mode">0</s:key>
<s:key name="min_peers_joined_flag">1</s:key>
<s:key name="peer_scheme_host_port">https://localhost:55569</s:key>
<s:key name="rolling_restart_flag">0</s:key>
<s:key name="service_ready_flag">1</s:key>
<s:key name="start_time">1413307203</s:key>
</s:dict>
</content>
</entry>
</feed>
shcluster/captain/jobs GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/captain/jobs
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>shclustercaptainjobs</title>
<id>https://localhost:8089/services/shcluster/captain/jobs</id>
<updated>2014-10-15T08:47:50-07:00</updated>
<generator build="235980" version="20141014"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/shcluster/captain/jobs/_new" rel="create"/>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>savedsearch_Alert - syslog errors last hour_1087026166</title>
<id>https://localhost:8089/services/shcluster/captain/jobs/savedsearch_Alert%20-%20syslog%20errors%20last%20hour_1087026166</id>
<updated>2014-10-15T08:47:50-07:00</updated>
<link href="/services/shcluster/captain/jobs/savedsearch_Alert%20-%20syslog%20errors%20last%20hour_1087026166" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/jobs/savedsearch_Alert%20-%20syslog%20errors%20last%20hour_1087026166" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="ATTEMPT_1">
<s:dict>
<s:key name="dispatch_time">1413363600</s:key>
<s:key name="errormsg">error response peer=https://wimpy.splunk.com:55560 rc=404 reason='<?xml version="1.0" encoding="UTF-8"?>
<response>
<messages>
<msg type="ERROR">Application does not exist: SA-nix</msg>
</messages>
</response>
'</s:key>
<s:key name="peer">99999999-9999-9999-9999-999999999999</s:key>
<s:key name="sid">NO_SID_RECEIVED_YET</s:key>
<s:key name="success">0</s:key>
</s:dict>
</s:key>
<s:key name="ATTEMPT_2">
<s:dict>
<s:key name="dispatch_time">1413363600</s:key>
<s:key name="peer">88888888-8888-8888-8888-888888888888</s:key>
<s:key name="sid">scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413363600_203_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="success">1</s:key>
</s:dict>
</s:key>
... eai:acl node elided ...
<s:key name="job_state">COMPLETED</s:key>
<s:key name="saved_search">Alert - syslog errors last hour</s:key>
<s:key name="savedsearchtype">savedsearch</s:key>
<s:key name="search_app">SA-nix</s:key>
<s:key name="search_owner">admin</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>savedsearch_Alert - syslog errors last hour_11648853</title>
<id>https://localhost:8089/services/shcluster/captain/jobs/savedsearch_Alert%20-%20syslog%20errors%20last%20hour_11648853</id>
<updated>2014-10-15T08:47:50-07:00</updated>
<link href="/services/shcluster/captain/jobs/savedsearch_Alert%20-%20syslog%20errors%20last%20hour_11648853" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/jobs/savedsearch_Alert%20-%20syslog%20errors%20last%20hour_11648853" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="ATTEMPT_1">
<s:dict>
<s:key name="dispatch_time">1413316800</s:key>
<s:key name="errormsg">error response peer=https://wimpy.splunk.com:55560 rc=404 reason='<?xml version="1.0" encoding="UTF-8"?>
<response>
<messages>
<msg type="ERROR">Application does not exist: SA-nix</msg>
</messages>
</response>
'</s:key>
<s:key name="peer">99999999-9999-9999-9999-999999999999</s:key>
<s:key name="sid">NO_SID_RECEIVED_YET</s:key>
<s:key name="success">0</s:key>
</s:dict>
</s:key>
<s:key name="ATTEMPT_2">
<s:dict>
<s:key name="dispatch_time">1413316800</s:key>
<s:key name="peer">88888888-8888-8888-8888-888888888888</s:key>
<s:key name="sid">scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413316800_34_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="success">1</s:key>
</s:dict>
</s:key>
... eai:acl node elided ...
<s:key name="job_state">COMPLETED</s:key>
<s:key name="saved_search">Alert - syslog errors last hour</s:key>
<s:key name="savedsearchtype">savedsearch</s:key>
<s:key name="search_app">SA-nix</s:key>
<s:key name="search_owner">admin</s:key>
</s:dict>
</content>
</entry>
.
.
.
<entry>
<title>savedsearch_fired_alerts_1050236433</title>
<id>https://localhost:8089/services/shcluster/captain/jobs/savedsearch_fired_alerts_1050236433</id>
<updated>2014-10-15T08:47:50-07:00</updated>
<link href="/services/shcluster/captain/jobs/savedsearch_fired_alerts_1050236433" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/jobs/savedsearch_fired_alerts_1050236433" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="ATTEMPT_1">
<s:dict>
<s:key name="dispatch_time">1413308100</s:key>
<s:key name="errormsg">error response peer=https://wimpy.splunk.com:55560 rc=404 reason='<?xml version="1.0" encoding="UTF-8"?>
<response>
<messages>
<msg type="ERROR">Application does not exist: SA-nix</msg>
</messages>
</response>
'</s:key>
<s:key name="peer">99999999-9999-9999-9999-999999999999</s:key>
<s:key name="sid">NO_SID_RECEIVED_YET</s:key>
<s:key name="success">0</s:key>
</s:dict>
</s:key>
<s:key name="ATTEMPT_2">
<s:dict>
<s:key name="dispatch_time">1413308100</s:key>
<s:key name="peer">88888888-8888-8888-8888-888888888888</s:key>
<s:key name="sid">scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413308100_2_88888888-8888-8888-8888-888888888888</s:key>
<s:key name="success">1</s:key>
</s:dict>
</s:key>
... eai:acl node elided ...
<s:key name="job_state">COMPLETED</s:key>
<s:key name="saved_search">fired_alerts</s:key>
<s:key name="savedsearchtype">savedsearch</s:key>
<s:key name="search_app">SA-nix</s:key>
<s:key name="search_owner">admin</s:key>
</s:dict>
</content>
</entry>
</feed>
shcluster/captain/jobs/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/captain/jobs/{name}
XML Response
shcluster/captain/members GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/captain/members
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>shclustercaptainmembers</title>
<id>https://localhost:8089/services/shcluster/captain/members</id>
<updated>2014-10-15T08:49:34-07:00</updated>
<generator build="235980" version="20141014"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/shcluster/captain/members/_new" rel="create"/>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>88888888-8888-8888-8888-888888888888</title>
<id>https://localhost:8089/services/shcluster/captain/members/88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-15T08:49:34-07:00</updated>
<link href="/services/shcluster/captain/members/88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/members/88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/captain/members/88888888-8888-8888-8888-888888888888" rel="edit"/>
<content type="text/xml">
<s:dict>
<s:key name="adhoc_searchhead">0</s:key>
<s:key name="advertise_restart_required">0</s:key>
<s:key name="artifact_count">4</s:key>
<s:key name="delayed_artifacts_to_discard">
<s:list/>
</s:key>
... eai:acl node elided ...
<s:key name="fixup_set">
<s:list/>
</s:key>
<s:key name="host_port_pair">localhost:8089</s:key>
<s:key name="kv_store_host_port">?</s:key>
<s:key name="label">searchhead</s:key>
<s:key name="last_heartbeat">1413388171</s:key>
<s:key name="peer_scheme_host_port">https://localhost:8089</s:key>
<s:key name="pending_job_count">0</s:key>
<s:key name="replication_count">0</s:key>
<s:key name="replication_port">3456</s:key>
<s:key name="replication_use_ssl">0</s:key>
<s:key name="site">site2</s:key>
<s:key name="status">Up</s:key>
<s:key name="status_counter">
<s:dict>
<s:key name="Complete">4</s:key>
<s:key name="PendingDiscard">0</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>99999999-9999-9999-9999-999999999999</title>
<id>https://localhost:8089/services/shcluster/captain/members/99999999-9999-9999-9999-999999999999</id>
<updated>2014-10-15T08:49:34-07:00</updated>
<link href="/services/shcluster/captain/members/99999999-9999-9999-9999-999999999999" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/captain/members/99999999-9999-9999-9999-999999999999" rel="list"/>
<link href="/services/shcluster/captain/members/99999999-9999-9999-9999-999999999999" rel="edit"/>
<content type="text/xml">
<s:dict>
<s:key name="adhoc_searchhead">0</s:key>
<s:key name="advertise_restart_required">0</s:key>
<s:key name="artifact_count">4</s:key>
<s:key name="delayed_artifacts_to_discard">
<s:list/>
</s:key>
... eai:acl node elided ...
<s:key name="fixup_set">
<s:list/>
</s:key>
<s:key name="host_port_pair">wimpy.splunk.com:55560</s:key>
<s:key name="kv_store_host_port">?</s:key>
<s:key name="label">master</s:key>
<s:key name="last_heartbeat">1413388171</s:key>
<s:key name="peer_scheme_host_port">https://wimpy.splunk.com:55560</s:key>
<s:key name="pending_job_count">0</s:key>
<s:key name="replication_count">0</s:key>
<s:key name="replication_port">55570</s:key>
<s:key name="replication_use_ssl">0</s:key>
<s:key name="site">site1</s:key>
<s:key name="status">Up</s:key>
<s:key name="status_counter">
<s:dict>
<s:key name="Complete">4</s:key>
<s:key name="NonStreamingTarget">0</s:key>
<s:key name="PendingDiscard">0</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
shcluster/captain/members/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/captain/members/{name}
XML Response
shcluster/config GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/config
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>shclusterconfig</title>
<id>https://localhost:8089/services/shcluster/config</id>
<updated>2014-10-15T08:50:47-07:00</updated>
<generator build="235980" version="20141014"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/shcluster/config/_reload" rel="_reload"/>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>config</title>
<id>https://localhost:8089/services/shcluster/config/config</id>
<updated>2014-10-15T08:50:47-07:00</updated>
<link href="/services/shcluster/config/config" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/config/config" rel="list"/>
<link href="/services/shcluster/config/config/_reload" rel="_reload"/>
<link href="/services/shcluster/config/config" rel="edit"/>
<link href="/services/shcluster/config/config/disable" rel="disable"/>
<content type="text/xml">
<s:dict>
<s:key name="cxn_timeout">60</s:key>
<s:key name="disabled">0</s:key>
... eai:acl node elided ...
<s:key name="heartbeat_period">5</s:key>
<s:key name="heartbeat_timeout">60</s:key>
<s:key name="id">BB3116C0-73B9-459A-B473-254A18A69776</s:key>
<s:key name="max_peer_rep_load">5</s:key>
<s:key name="mode">dynamic_captain</s:key>
<s:key name="percent_peers_to_restart">10</s:key>
<s:key name="ping_flag">1</s:key>
<s:key name="quiet_period">60</s:key>
<s:key name="rcv_timeout">60</s:key>
<s:key name="register_replication_address"></s:key>
<s:key name="rep_cxn_timeout">60</s:key>
<s:key name="rep_max_rcv_timeout">600</s:key>
<s:key name="rep_max_send_timeout">600</s:key>
<s:key name="rep_rcv_timeout">60</s:key>
<s:key name="rep_send_timeout">60</s:key>
<s:key name="replication_factor">2</s:key>
<s:key name="replication_port">3456</s:key>
<s:key name="replication_use_ssl">0</s:key>
<s:key name="restart_timeout">60</s:key>
<s:key name="secret">********</s:key>
<s:key name="send_timeout">60</s:key>
</s:dict>
</content>
</entry>
</feed>
shcluster/member/artifacts GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/member/artifacts
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>shclustermemberartifacts</title>
<id>https://localhost:8089/services/shcluster/member/artifacts</id>
<updated>2014-10-15T08:51:46-07:00</updated>
<generator build="235980" version="20141014"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888</title>
<id>https://localhost:8089/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-15T08:51:46-07:00</updated>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413381600_268_88888888-8888-8888-8888-888888888888" rel="remove"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="status">Complete</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888</title>
<id>https://localhost:8089/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-15T08:51:46-07:00</updated>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413385200_281_88888888-8888-8888-8888-888888888888" rel="remove"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="status">Complete</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387900_290_88888888-8888-8888-8888-888888888888</title>
<id>https://localhost:8089/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387900_290_88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-15T08:51:46-07:00</updated>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387900_290_88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387900_290_88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413387900_290_88888888-8888-8888-8888-888888888888" rel="remove"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="status">Complete</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413388200_291_88888888-8888-8888-8888-888888888888</title>
<id>https://localhost:8089/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413388200_291_88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-15T08:51:46-07:00</updated>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413388200_291_88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413388200_291_88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD5b9b800e209365567_at_1413388200_291_88888888-8888-8888-8888-888888888888" rel="remove"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
<s:key name="status">Complete</s:key>
</s:dict>
</content>
</entry>
</feed>
shcluster/member/artifacts/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413518400_762_88888888-8888-8888-8888-888888888888
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>shclustermemberartifacts</title>
<id>https://localhost:8089/services/shcluster/member/artifacts</id>
<updated>2014-10-16T22:33:37-07:00</updated>
<generator build="235980" version="20141014"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413518400_762_88888888-8888-8888-8888-888888888888</title>
<id>https://wimpy.splunk.com:55569/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413518400_762_88888888-8888-8888-8888-888888888888</id>
<updated>2014-10-16T22:33:37-07:00</updated>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413518400_762_88888888-8888-8888-8888-888888888888" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413518400_762_88888888-8888-8888-8888-888888888888" rel="list"/>
<link href="/services/shcluster/member/artifacts/scheduler__admin_U0Etbml4__RMD592d31e53ed62579e_at_1413518400_762_88888888-8888-8888-8888-888888888888" rel="remove"/>
<content type="text/xml">
<s:dict>
... eai:acl node elided ...
... eai:attributes node elided ...
<s:key name="status">Complete</s:key>
</s:dict>
</content>
</entry>
</feed>
shcluster/member/consensus GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/member/consensus
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>shclustermemberconsensus</title>
<id>https://localhost:8089/services/shcluster/member/consensus</id>
<updated>2014-10-15T08:52:28-07:00</updated>
<generator build="235980" version="20141014"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>shc_cluster_configuration</title>
<id>https://localhost:8089/services/shcluster/member/consensus/shc_cluster_configuration</id>
<updated>2014-10-15T08:52:28-07:00</updated>
<link href="/services/shcluster/member/consensus/shc_cluster_configuration" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/member/consensus/shc_cluster_configuration" rel="list"/>
<link href="/services/shcluster/member/consensus/shc_cluster_configuration" rel="edit"/>
<content type="text/xml">
<s:dict>
<s:key name="configuration_id">4</s:key>
... eai:acl node elided ...
<s:key name="servers_list">https://localhost:55560,https://localhost:55569</s:key>
</s:dict>
</content>
</entry>
</feed>
shcluster/member/info GET
XML
XML Request
curl -k -u admin:pass https://localhost:8189/services/shcluster/member/info
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>shclustermemberinfo</title>
<id>https://localhost:8089/services/shcluster/member/info</id>
<updated>2014-10-15T08:53:07-07:00</updated>
<generator build="235980" version="20141014"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>member</title>
<id>https://localhost:8089/services/shcluster/member/info/member</id>
<updated>2014-10-15T08:53:07-07:00</updated>
<link href="/services/shcluster/member/info/member" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/shcluster/member/info/member" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="adhoc_searchhead">0</s:key>
... eai:acl node elided ...
<s:key name="is_registered">1</s:key>
<s:key name="last_heartbeat_attempt">1413388386</s:key>
<s:key name="maintenance_mode">0</s:key>
<s:key name="peer_load_stats_gla_15m">3</s:key>
<s:key name="peer_load_stats_gla_1m">0</s:key>
<s:key name="peer_load_stats_gla_5m">1</s:key>
<s:key name="peer_load_stats_max_runtime">0.000000</s:key>
<s:key name="peer_load_stats_num_autosummary">0</s:key>
<s:key name="peer_load_stats_num_historical">0</s:key>
<s:key name="peer_load_stats_num_realtime">0</s:key>
<s:key name="peer_load_stats_num_running">0</s:key>
<s:key name="peer_load_stats_total_runtime">0.000000</s:key>
<s:key name="restart_state">NoRestart</s:key>
<s:key name="status">Up</s:key>
</s:dict>
</content>
</entry>
</feed>
|
PREVIOUS Cluster endpoint descriptions |
NEXT Configuration endpoint descriptions |
This documentation applies to the following versions of Splunk® Enterprise: 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11, 6.5.0, 6.5.1, 6.5.1612 (Splunk Cloud only), 6.5.2
Feedback submitted, thanks!