Why is my Splunk destination showing unhealthy when the individual workers are showing a green healthy status?
Question
Splunk destination health not matching individual worker node health in destination
There are a couple of Cribl BUG that are contributing to this behaviour.
CRIBL-18868:
The monitoring dashboard for destinations is showing the health from the earliest timestamp of the range, instead of the latest. This means, with a 1h time selection, the health status is delayed by an hour.
CRIBL-12259:
The Health metrics were disabled due to a performance issue with the GUI when the numbers of workers exceed 50+ workers as per CRIBL-17756 and on the destination page we default to the warning status.
Sign up
Already have an account? Login
Login to the community
No account yet? Create an account
Using your Cribl Curious or University Account
User Login Employee loginEnter your E-mail address. We'll send you an e-mail with instructions to reset your password.