Proactive Splunk component monitoring has the following requirements and limitations.
Splunk Enterprise version requirements
Proactive Splunk component monitoring requires Splunk Enterprise version 7.1 or later.
Operating system requirements
Proactive Splunk component monitoring is available on all operating systems supported for Splunk Enterprise. For a list of supported operating systems, see System requirements in the Installation Manual.
REST endpoint access requirements
Proactive Splunk component monitoring displays information from the
server/health/splunkd endpoint. You can view this information in the
splunkd health report in Splunk Web.
To query the
server/health/splunkd endpoint directly requires access to the
splunkd management port (default port 8089) over http. For more information, see Connecting to splunkd in the REST API User Manual.
For endpoint details, see server/health/splunkd in the REST API Reference Manual.
Supported Splunk Enterprise features
Proactive Splunk component monitoring lets you monitor these Splunk Enterprise features.
|Data Forwarding / Splunk-2-Splunk Forwarding||TCPOutAutoLB|
|File Monitor Input||BatchReader, TailReader|
|Indexer Clustering||Cluster Bundles, Data Durability, Data Searchable, Indexers, Indexing Ready, Master Connectivity, Replication Failures, Slave State, Slave Version, Search Head Connectivity|
About proactive Splunk component monitoring
Configure proactive Splunk component monitoring
This documentation applies to the following versions of Splunk® Enterprise: 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9