QuestionQ126

Splunk Troubleshooting Methods and Tools

When troubleshooting monitor inputs, which command verifies the status of the files being tailed?

  • A splunk cmd btool inputs list | tail
  • B splunk cmd btool check inputs layer
  • C curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:FileStatus
  • D curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:Tailstatus
Explanation

Splunk Enterprise provides the TailingProcessor:FileStatus REST endpoint to return status information for monitored files. Querying it through the management port at https://serverhost:8089/services/admin/inputstatus/TailingProcessor:FileStatus checks the tailed-file status.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!