https://community.splunk.com/t5/Monitoring-Splunk/How-to-know-what-kind-of-logs-are-indexing-to-each-indexer/m-p/451999#M6121 <P>To get all in one go</P> <PRE><CODE>| tstats count where (index=_* OR index=*) by index, sourcetype, source </CODE></PRE> Thu, 09 May 2019 20:48:15 GMT koshyk 2019-05-09T20:48:15Z https://community.splunk.com/t5/Monitoring-Splunk/How-to-know-what-kind-of-logs-are-indexing-to-each-indexer/m-p/451997#M6119 <P>How to see what kind of logs are indexing to each indexer<BR /> can please help with splunk basic query.</P> Thu, 09 May 2019 16:26:48 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-to-know-what-kind-of-logs-are-indexing-to-each-indexer/m-p/451997#M6119 sravankaripe 2019-05-09T16:26:48Z https://community.splunk.com/t5/Monitoring-Splunk/How-to-know-what-kind-of-logs-are-indexing-to-each-indexer/m-p/451998#M6120 <P><CODE>| tstats count where index=* by source</CODE> (to get the list of source getting index)</P> <P><CODE>| tstats count where index=* by source</CODE> (to get the list of sourcetype getting index)</P> Thu, 09 May 2019 18:49:55 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-to-know-what-kind-of-logs-are-indexing-to-each-indexer/m-p/451998#M6120 sumanssah 2019-05-09T18:49:55Z https://community.splunk.com/t5/Monitoring-Splunk/How-to-know-what-kind-of-logs-are-indexing-to-each-indexer/m-p/451999#M6121 <P>To get all in one go</P> <PRE><CODE>| tstats count where (index=_* OR index=*) by index, sourcetype, source </CODE></PRE> Thu, 09 May 2019 20:48:15 GMT https://community.splunk.com/t5/Monitoring-Splunk/How-to-know-what-kind-of-logs-are-indexing-to-each-indexer/m-p/451999#M6121 koshyk 2019-05-09T20:48:15Z