How to find out the indexes ans sourcetypes of the default dashboards in Splunk app for AWS .Most of the panels use the below macro
`aws-description-resource( (aws_account_id="*") , (region="*") , "ec2_instances")`
But I am not able to figure out the index and sourcetype for it.
Assuming your running > v6.5, you can expand the macro by pressing ctrl + shift + e
If you're running an earlier version you can look in the job inspector or go to Settings > Advanced Search > Macros
to find your macro
Assuming your running > v6.5, you can expand the macro by pressing ctrl + shift + e
If you're running an earlier version you can look in the job inspector or go to Settings > Advanced Search > Macros
to find your macro
Thank You