topic Re: How to search for all devices in my environment that are sending logs to Splunk? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-search-for-all-devices-in-my-environment-that-are-sending/m-p/229862#M68118 <P>Extremely useful answer, life saver today!</P> Mon, 04 Feb 2019 12:39:56 GMT brewster88 2019-02-04T12:39:56Z How to search for all devices in my environment that are sending logs to Splunk? https://community.splunk.com/t5/Splunk-Search/How-to-search-for-all-devices-in-my-environment-that-are-sending/m-p/229859#M68115 <P>Morning Guys</P> <P>I'm mid plan for ripping out our Splunk environment and starting again. As some of you may be aware from my past questions, I inherited our current Splunk environment which I don't believe was in a great state.</P> <P>I'm looking at effectively starting fresh, but I don't know of all the devices sending in logs. Is there a search I can run that will pick up everything, Servers, Network Devices, everything else?</P> <P>I have multiple Heavy Forwarders sending on logs from all over the place, all going to one indexer with a mini Splunk environment bolted on to that too. If someone could advise that would be awesome.</P> <P>Thanks as always</P> Thu, 17 Sep 2015 08:38:09 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-for-all-devices-in-my-environment-that-are-sending/m-p/229859#M68115 AaronMoorcroft 2015-09-17T08:38:09Z Re: How to search for all devices in my environment that are sending logs to Splunk? https://community.splunk.com/t5/Splunk-Search/How-to-search-for-all-devices-in-my-environment-that-are-sending/m-p/229860#M68116 <P>You can run thorough all of the metadata. </P> <PRE><CODE>|metadata type=hosts index=* </CODE></PRE> <P>This will pull the metadata <CODE>host</CODE> value for anything on your indexer. This would be a quick starting point for you. </P> Thu, 17 Sep 2015 15:26:12 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-for-all-devices-in-my-environment-that-are-sending/m-p/229860#M68116 alacercogitatus 2015-09-17T15:26:12Z Re: How to search for all devices in my environment that are sending logs to Splunk? https://community.splunk.com/t5/Splunk-Search/How-to-search-for-all-devices-in-my-environment-that-are-sending/m-p/229861#M68117 <P>Thank you <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Fri, 18 Sep 2015 08:46:27 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-for-all-devices-in-my-environment-that-are-sending/m-p/229861#M68117 AaronMoorcroft 2015-09-18T08:46:27Z Re: How to search for all devices in my environment that are sending logs to Splunk? https://community.splunk.com/t5/Splunk-Search/How-to-search-for-all-devices-in-my-environment-that-are-sending/m-p/229862#M68118 <P>Extremely useful answer, life saver today!</P> Mon, 04 Feb 2019 12:39:56 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-for-all-devices-in-my-environment-that-are-sending/m-p/229862#M68118 brewster88 2019-02-04T12:39:56Z