Requirements
Proactive Splunk component monitoring has the following requirements and limitations.
Splunk Enterprise version requirements
Proactive Splunk component monitoring requires Splunk Enterprise version 7.1 or later.
Operating system requirements
Proactive Splunk component monitoring is available on all operating systems supported for Splunk Enterprise. For a list of supported operating systems, see System requirements in the Installation Manual.
REST endpoint access requirements
Proactive Splunk component monitoring displays information from the server/health/splunkd endpoint. You can view this information in the splunkd health report in Splunk Web.
To query the server/health/splunkd endpoint directly requires access to the splunkd management port (default port 8089) over http. For more information, see Connecting to splunkd in the REST API User Manual.
For endpoint details, see server/health/splunkd in the REST API Reference Manual.
Supported Splunk Enterprise features
Proactive Splunk component monitoring lets you monitor these Splunk Enterprise features.
| Feature Category | Features |
|---|---|
| Data Forwarding / Splunk-2-Splunk Forwarding | TCPOutAutoLB |
| File Monitor Input | BatchReader, TailReader |
| Indexer Clustering | Cluster Bundles, Data Durability, Data Searchable, Indexers, Indexing Ready, Master Connectivity, Replication Failures, Slave State, Slave Version, Search Head Connectivity |
| About proactive Splunk component monitoring | Configure proactive Splunk component monitoring |
This documentation applies to the following versions of Splunk® Enterprise: 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10
Download manual
Feedback submitted, thanks!