< Back |Home| Next >
- Most frequently used splunk commands.
1. check splunk status or check if splunk is running in linux
./splunk status
2. start splunk
/.splunk start
3. stop splunk
./splunk stop
4. start splunk in debug mode
./splunk start --debug
5. check on what port splunk is running or listening
netstat -an | grep splunk
6.check cpu usage by splunk
top
7. What splunk thinks of configurations (Using Btool)
./splunk cmd btool list
./splunk cmd btool list --debug
./splunk cmd btool web list --debug
--debug tells where it is reading the configuration from
8. Deployment Server commands
./splunk list deploy-clients
./splunk reload
./splunk reload deploy-server -class <ServerClass>
9.monitor files in a directory i.e. add logs to splunk from a directory
./splunk add monitor /path to log file
< Back |Home| Next >
Comment Box is loading comments...