You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Splunk Operator: Enhancement request - use a command for the liveness probe instead of a URL #1431
Describe the request
Currently the liveness probe uses port 8089 to check the health status of the splunk process. In a busy indexer running smartstore downloads it may fail to respond within 30 seconds, however, this is normal behaviour so I've made the failure thresholds very large.
However, I believe there is a safer way to check the Splunk process is alive and healthy.
As an example this is a failed indexer:
Liveness probe failed: Mgmt. port is not reachable
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0curl: (7) Failed to connect to localhost port 8089: Connection refused
(killed by the OOM killer)
This indexer is busy but will recover:
Liveness probe failed: command "/mnt/probes/livenessProbe.sh" timed out
Expected behavior
I'd suggest using a command: /opt/splunk/bin/splunk status
I checked inside the pod and if successful you get a 0, if down you get a 3:
$ /opt/splunk/bin/splunk status
splunkd is not running.
[splunk@001 /opt/splunk]
$ echo $?
3
Issue Splunk Operator: Allow custom probes or changes to existing probes #1321 and pull request #1549 may have resolved this. I will try to test this next week.
Activity
michal-tatusko-splunk commentedon Apr 10, 2025
This issue is connected to #1078 and CSPL-2432 (SOK team internal Jira id).
gjanders commentedon Jul 4, 2026
Issue Splunk Operator: Allow custom probes or changes to existing probes
#1321 and pull request #1549 may have resolved this. I will try to test this next week.
kasiakoziol commentedon Aug 12, 2026
Hello @gjanders
Did you have a chance to test it? If it is working as expected, could we close the issue?
Thanks,
Kasia
gjanders commentedon Aug 12, 2026
I can confirm this is working. I can now run a simple splunk status command, and based on the output I can return the exit code.