https://community.splunk.com/t5/Security/index/m-p/705247#M18241 <P>Hello I want to see all indexes latest data time. like when did the latest data came to this index.</P> Tue, 26 Nov 2024 05:18:22 GMT Siddharthnegi 2024-11-26T05:18:22Z https://community.splunk.com/t5/Security/index/m-p/705247#M18241 <P>Hello I want to see all indexes latest data time. like when did the latest data came to this index.</P> Tue, 26 Nov 2024 05:18:22 GMT https://community.splunk.com/t5/Security/index/m-p/705247#M18241 Siddharthnegi 2024-11-26T05:18:22Z https://community.splunk.com/t5/Security/index/m-p/705254#M18242 <P>You can do</P><LI-CODE lang="markup">| tstats max(_time) as latest where index=* by index</LI-CODE><P>but depending on the time range you use for the search it will only return data for those indexes that have data during that timespan</P><P>You can also do&nbsp;</P><LI-CODE lang="markup">| rest /services/data/indexes count=0 | table title maxTime minTime</LI-CODE><P>&nbsp;</P> Tue, 26 Nov 2024 06:13:04 GMT https://community.splunk.com/t5/Security/index/m-p/705254#M18242 bowesmana 2024-11-26T06:13:04Z