https://community.splunk.com/t5/Splunk-Search/How-to-check-macro-using-sourcetype/m-p/556543#M158063 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352">@gcusello</a>&nbsp;/ Team,</P><P>I'm searching for list of indexes using</P><P>|tstats count where index=* sourcetype=log4j&nbsp; by index sourcetype</P><P>I got results with lot of indexes in my environment. How can I find out which Data model / Macro using these indexes ?</P><P>Is there any way to find out where it's been using ? Thanks in advance.&nbsp;</P> Mon, 21 Jun 2021 15:23:57 GMT sasankganta 2021-06-21T15:23:57Z https://community.splunk.com/t5/Splunk-Search/How-to-check-macro-using-sourcetype/m-p/556182#M157931 <P>I'm searching for list of indexes using</P><P>|tstats count where index=* sourcetype=log4j&nbsp; by index sourcetype</P><P>I got results with lot of indexes in my environment. How can I find out which Data model / Macro using these indexes ?</P><P>Is there any way to find out where it's been using ? Thanks in advance.&nbsp;&nbsp;</P> Thu, 17 Jun 2021 14:20:34 GMT https://community.splunk.com/t5/Splunk-Search/How-to-check-macro-using-sourcetype/m-p/556182#M157931 sasankganta 2021-06-17T14:20:34Z https://community.splunk.com/t5/Splunk-Search/How-to-check-macro-using-sourcetype/m-p/556543#M158063 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352">@gcusello</a>&nbsp;/ Team,</P><P>I'm searching for list of indexes using</P><P>|tstats count where index=* sourcetype=log4j&nbsp; by index sourcetype</P><P>I got results with lot of indexes in my environment. How can I find out which Data model / Macro using these indexes ?</P><P>Is there any way to find out where it's been using ? Thanks in advance.&nbsp;</P> Mon, 21 Jun 2021 15:23:57 GMT https://community.splunk.com/t5/Splunk-Search/How-to-check-macro-using-sourcetype/m-p/556543#M158063 sasankganta 2021-06-21T15:23:57Z