Checksplunk is a Perl script for Splunk administrators to understand the health and integrity of Splunk and the server(s) Splunk is running on. It doesn't write anything to the system or any Splunk config files. Features include display of Splunk level output, Splunk version, Splunk daemon running (from the process table), Splunkd running (from splunk status), Splunkweb running (from splunk status), number of events indexed, number of errors in the log files, errors in log files, number of hosts, indexed hosts, license information, number of user accounts created in Splunk, user audit logs, users with accounts in Splunk, the top 10 systems using the largest amount of license in kb, and the number of searches and last access time by users. It can build all the SPDASH files needed for the Web dashboard interface.
|Operating Systems||Linux Unix|
Release Notes: The spdash output function was rewritten to support more Linux flavors.