Splunk search for Uptime of Splunk Servers
Copy
| rest /services/server/info | eval secUp=now()-startup_time, minutesUp=secUp/60 | table serverName, server_roles, secUp, minutesUp | rename serverName as "Splunk Server", server_roles as "Server Roles", secUp as "Uptime (sec)", minutesUp as "Uptime (min)"
This search will output the uptime of any Splunk servers that are a search peer of the search head where the search is run. Uptime is provided in seconds and minutes.
