https://community.splunk.com/t5/Monitoring-Splunk/List-of/m-p/568186#M8593 <P>Usually, the easiest way to get info about splunk config items is with | rest command.</P><P>In this case you're interested in <A href="https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTintrospect#data.2Findexes" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTintrospect#data.2Findexes</A> endpoint.</P> Thu, 23 Sep 2021 04:52:37 GMT PickleRick 2021-09-23T04:52:37Z https://community.splunk.com/t5/Monitoring-Splunk/List-of/m-p/568177#M8592 <P>Hey guys,</P><P>&nbsp;</P><P>&nbsp;</P> Thu, 23 Sep 2021 12:07:03 GMT https://community.splunk.com/t5/Monitoring-Splunk/List-of/m-p/568177#M8592 wrbeleli 2021-09-23T12:07:03Z https://community.splunk.com/t5/Monitoring-Splunk/List-of/m-p/568186#M8593 <P>Usually, the easiest way to get info about splunk config items is with | rest command.</P><P>In this case you're interested in <A href="https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTintrospect#data.2Findexes" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTintrospect#data.2Findexes</A> endpoint.</P> Thu, 23 Sep 2021 04:52:37 GMT https://community.splunk.com/t5/Monitoring-Splunk/List-of/m-p/568186#M8593 PickleRick 2021-09-23T04:52:37Z https://community.splunk.com/t5/Monitoring-Splunk/List-of/m-p/568190#M8594 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/238816">@wrbeleli</a>,</P><P>You can use below sample search;</P><LI-CODE lang="markup">| rest /services/data/indexes | search NOT title=_* | table title | search NOT [| rest /services/authorization/roles | where NOT match(srchIndexesAllowed,"\*+") | rename srchIndexesAllowed as title | dedup title | fields title ]</LI-CODE> Thu, 23 Sep 2021 05:11:52 GMT https://community.splunk.com/t5/Monitoring-Splunk/List-of/m-p/568190#M8594 scelikok 2021-09-23T05:11:52Z