topic Re: List of Serverclass and apps in deployment server in Splunk Search

List of Serverclass and apps in deployment server

shinde0509 — Tue, 16 Feb 2021 12:34:21 GMT

SPlunk SPL query to list unique serverclass and Apps present in deployment server.

Re: List of Serverclass and apps in deployment server

gcusello — Tue, 16 Feb 2021 14:03:21 GMT

I did it some years ago, see if it's still working:

| rest splunk_server=local /services/deployment/server/clients\ | search ip=xx.xx.xx.xx\ | table hostname ip utsname *.restartSplunkd\ | eval temp=hostname."#".ip."#".utsname \ | table temp *.restartSplunkd\ | untable temp apps count \ | eval Apps=if(like(apps,"app%"),mvindex(split(apps,"."),1),null()) \ | eval ServerClass=if(like(apps,"server%"),mvindex(split(apps,"."),1),null() ) \ | rex field=temp "(?<Host>.*)#(?<Host_IP>.*)#(?<Machine_Type>.*)" \ | table Host Host_IP Machine_Type Apps ServerClass \ | stats Values(*) as * by Host Host_IP Machine_Type\ | nomv Apps\ | nomv ServerClass\

Ciao.

Giuseppe

Re: List of Serverclass and apps in deployment server

richgalloway — Tue, 16 Feb 2021 14:26:12 GMT

Run this query on the DS

| rest /services/deployment/server/serverclasses splunk_server=local | append [| rest /services/deployment/server/applications splunk_server=local]