hguerrier
10/5/2017 - 2:02 PM

#Splunk Check For Restarts

#Splunk Check For Restarts

Check splunk instances for restarts
content_copyfile_download
index=_internal sourcetype=splunkd host=* source="*splunkd.log" component=ShutdownHandler 
  | stats last(_time) as time by host 
  | convert ctime(time) 
  | table host, time