Hi all,
I am running the below query, I get responses from some of my Splunk servers but not all ?
| rest /services/server/info | eval LastStartupTime=strftime(startup_time, "%Y/%m/%d %H:%M:%S")
| eval timenow=now()
| eval daysup = round((timenow - startup_time) / 86400,0)
| eval Uptime = tostring(daysup) + " Days"
| table splunk_server LastStartupTime Uptime
Is there anything I am missing on the servers that are not reporting back ?
Cheers
Paul
↧