Dashboards & Visualizations

Display Splunk ServerName on a dashboard

rmorlen
Splunk Employee
Splunk Employee

We run Splunk in pooled mode so we connect using something like http://splunk.company.com. Behind that glip we have a bunch of searchheads.

I would like to create a dashboard where as part of the dashboard it shows the specific serverName I am connected to.

Any ideas on how to get to this information using a search or advanced XML?

Tags (1)
0 Karma
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

You can get it with

| rest /services/server/info splunk_server=local | fields serverName

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

You can get it with

| rest /services/server/info splunk_server=local | fields serverName

rmorlen
Splunk Employee
Splunk Employee

That worked. Thanks!

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...