<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: What is the best way to get list of index in my splunk in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96225#M24866</link>
    <description>&lt;P&gt;| eventcount summarize=false index=&lt;EM&gt; index=_&lt;/EM&gt; | dedup index | fields index&lt;/P&gt;

&lt;P&gt;doesn't work I get "no results found" &lt;/P&gt;</description>
    <pubDate>Wed, 02 Sep 2015 21:41:51 GMT</pubDate>
    <dc:creator>mendesjo</dc:creator>
    <dc:date>2015-09-02T21:41:51Z</dc:date>
    <item>
      <title>What is the best way to get list of index in my splunk</title>
      <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96220#M24861</link>
      <description>&lt;P&gt;Currently i'm running this command for 2 days, it takes quite a lot of time&lt;/P&gt;

&lt;P&gt;index=* | stats count by index&lt;/P&gt;

&lt;P&gt;Is there a better to get list of index? Since its like a table created in splunk. it should be fairly easy to get it some other way.&lt;/P&gt;</description>
      <pubDate>Fri, 19 Oct 2012 11:45:49 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96220#M24861</guid>
      <dc:creator>ma_anand1984</dc:creator>
      <dc:date>2012-10-19T11:45:49Z</dc:date>
    </item>
    <item>
      <title>Re: What is the best way to get list of index in my splunk</title>
      <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96221#M24862</link>
      <description>&lt;P&gt;You can get all kinds of info about your indexes by hitting the REST endpoint &lt;CODE&gt;data/indexes&lt;/CODE&gt;:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| rest /services/data/indexes
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 19 Oct 2012 11:50:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96221#M24862</guid>
      <dc:creator>Ayn</dc:creator>
      <dc:date>2012-10-19T11:50:05Z</dc:date>
    </item>
    <item>
      <title>Re: What is the best way to get list of index in my splunk</title>
      <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96222#M24863</link>
      <description>&lt;P&gt;Thanks ayn for the quick reply. I was looking for the answer mentioned in &lt;BR /&gt;
&lt;A href="http://splunk-base.splunk.com/answers/39370/is-it-possibl-to-get-a-list-of-available-indices"&gt;http://splunk-base.splunk.com/answers/39370/is-it-possibl-to-get-a-list-of-available-indices&lt;/A&gt;&lt;BR /&gt;
I should have checked it before posting this question&lt;/P&gt;</description>
      <pubDate>Fri, 19 Oct 2012 11:59:08 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96222#M24863</guid>
      <dc:creator>ma_anand1984</dc:creator>
      <dc:date>2012-10-19T11:59:08Z</dc:date>
    </item>
    <item>
      <title>Re: What is the best way to get list of index in my splunk</title>
      <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96223#M24864</link>
      <description>&lt;P&gt;refer: &lt;A href="http://splunk-base.splunk.com/answers/39370/is-it-possibl-to-get-a-list-of-available-indices"&gt;http://splunk-base.splunk.com/answers/39370/is-it-possibl-to-get-a-list-of-available-indices&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;&lt;CODE&gt;&lt;BR /&gt;
&lt;/CODE&gt;&lt;PRE&gt;&lt;CODE&gt;&lt;BR /&gt;
| eventcount summarize=false index=* index=_* | dedup index | fields index&lt;BR /&gt;
&lt;/CODE&gt;&lt;/PRE&gt;&lt;BR /&gt;
&lt;/P&gt;</description>
      <pubDate>Fri, 19 Oct 2012 12:00:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96223#M24864</guid>
      <dc:creator>ma_anand1984</dc:creator>
      <dc:date>2012-10-19T12:00:09Z</dc:date>
    </item>
    <item>
      <title>Re: What is the best way to get list of index in my splunk</title>
      <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96224#M24865</link>
      <description>&lt;P&gt;Thank you for the rest command! I hadn't thought of that and that contains so much of the data I've been looking for.&lt;/P&gt;</description>
      <pubDate>Mon, 11 Feb 2013 19:13:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96224#M24865</guid>
      <dc:creator>sloshburch</dc:creator>
      <dc:date>2013-02-11T19:13:14Z</dc:date>
    </item>
    <item>
      <title>Re: What is the best way to get list of index in my splunk</title>
      <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96225#M24866</link>
      <description>&lt;P&gt;| eventcount summarize=false index=&lt;EM&gt; index=_&lt;/EM&gt; | dedup index | fields index&lt;/P&gt;

&lt;P&gt;doesn't work I get "no results found" &lt;/P&gt;</description>
      <pubDate>Wed, 02 Sep 2015 21:41:51 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96225#M24866</guid>
      <dc:creator>mendesjo</dc:creator>
      <dc:date>2015-09-02T21:41:51Z</dc:date>
    </item>
    <item>
      <title>Re: What is the best way to get list of index in my splunk</title>
      <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96226#M24867</link>
      <description>&lt;P&gt;How do you use this in, say, a custom app's input panel? If I try running the 'rest /services/data/indexes' search, I get "No results found", even with the time set to "All time". Like for mendesjo, 'eventcount' reports "No results found".&lt;/P&gt;</description>
      <pubDate>Thu, 23 Nov 2017 16:39:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96226#M24867</guid>
      <dc:creator>DUThibault</dc:creator>
      <dc:date>2017-11-23T16:39:05Z</dc:date>
    </item>
    <item>
      <title>Re: What is the best way to get list of index in my splunk</title>
      <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96227#M24868</link>
      <description>&lt;P&gt;Settings -&amp;gt; Indexes ? &lt;/P&gt;</description>
      <pubDate>Thu, 05 Mar 2020 12:13:36 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96227#M24868</guid>
      <dc:creator>tompai</dc:creator>
      <dc:date>2020-03-05T12:13:36Z</dc:date>
    </item>
    <item>
      <title>Re: What is the best way to get list of index in my splunk</title>
      <link>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96228#M24869</link>
      <description>&lt;P&gt;This spl strings worked on instance. Thank you for sharing&lt;BR /&gt;
index=* | stats count by index&lt;BR /&gt;
| rest /services/data/indexes&lt;BR /&gt;
| eventcount summarize=false index=* index=_* | dedup index | fields index&lt;/P&gt;</description>
      <pubDate>Tue, 14 Apr 2020 13:58:58 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/What-is-the-best-way-to-get-list-of-index-in-my-splunk/m-p/96228#M24869</guid>
      <dc:creator>jcorcoran508</dc:creator>
      <dc:date>2020-04-14T13:58:58Z</dc:date>
    </item>
  </channel>
</rss>

