I will have a dashboard which will show the list of servers which is not sending the logs and i will have "Button" against to that servers and when the user clicks the button the respective universal forwarders needs to be restarted.
Is there a way we can restart the running splunk universal forwarder service in the server. I thought of doing in the below ways,
1. Deploying an app with restartsplunkd=true in serverclass.conf, But i am not sure how this can be achieved in a "button" click
2. using curl with admin creadentials -> https://Hostname:8089/services/server/control/restart.......... but here the admin credentials will be in cleartext form.................
Can you guys bring some ideas to achieve this
↧