Splunk Deployment Server Check

Project Notes

If you use Forwarder Management (also known as Deployment Server) to configure your infrastructure, you really want to make sure your Clients/Forwarders are up-and-running.

This Powershell Script will check that all clients which logged into Deployment Server are reachable.

Find more information at https://www.batchworks.de/monitoring-splunk-forwarder-management-clients-using-nagios

Parameters:
-servername
Servername or IP address of the Deployment Server/Forwarder Management

-port
Port of splunkd - default 8089

-protocol
Protocol to use to communicate with splunkd - default: https

-timeout
Connection timeout to splunkd in milliseconds - default 5000

-username
Username to use to login to splunkd

-password
Password to use with splunkd

-warn
time in seconds (default 5) which a client is allowed to overdue before a warning is generated, depends on configured phoneHomeIntervalInSecs (default 60) in client settings

-critical
time in seconds (default 300) which a client is allowed to overdue before a critical is generated, depends on configured phoneHomeIntervalInSecs (default 60) in client settings