Check Deployer and search head status in internal logs

I am trying to monitor deployer and search head service status using _internal logs. Which fields should I consider to monitor whether Splunk service on deployer and SH are up and running? Note: I am building a dashboard to monitor splunk service status