topic Re: How to know Network info and Splunk existing info from the existing Splunk configuration in Deployment Architecture

How to know Network info and Splunk existing info from the existing Splunk configuration

Steave4app — Tue, 29 Nov 2016 15:43:23 GMT

Hi Guys,

How to know total indexer placed, total source types, total IP networks from the Splunk GUI? How to know Network info and Splunk existing info from the existing Splunk configuration?

Re: How to know Network info and Splunk existing info from the existing Splunk configuration

gcusello — Tue, 29 Nov 2016 15:50:12 GMT

Hi Steave4app,
your question is very large!
to have existing Splunk configuration you can use | rest command but it isn't easy to describe.
to have information about the indexed logs, you can schedule night searches and find results in the morning.
Maybe could be useful tu use some App like Distributed Management Console or other to find in apps.splunk.com.
Bye.
Giuseppe

Re: How to know Network info and Splunk existing info from the existing Splunk configuration

Steave4app — Thu, 01 Dec 2016 10:22:08 GMT

Hey Cusello,

Thanks a lot for this reference. Actually, my concerned about to know how many Indexer are configured in the network, count of source type or data source etc. Can we know those kind of information from the Splunk configuration?

Please let me know if there is any way 🙂