Deployment Architecture

How can i check which all logs are being ingested in my clients splunk architecture?

SonakshiRaiTH
New Member

Hi 

 

i am new to splunk and TH 

I want to understand how can i check which all logs are being ingested in my clients splunk architecture 

Also , is there a way i can look at clients network architecture from splunk?

Thanks in Advance

Labels (1)
0 Karma

tshah-splunk
Splunk Employee
Splunk Employee

Hey @SonakshiRaiTH,

Try running the below query for a short time period. It'll help you identify all the logs that are coming to Splunk or getting monitored by Splunk.

index=_internal source=*.log
| stats count by source

You can check the monitoring console of the environment to have the overview of the Splunk architecture.

---
If you find the answer helpful, an upvote/karma is appreciated
0 Karma
Get Updates on the Splunk Community!

Aligning Observability Costs with Business Value: Practical Strategies

 Join us for an engaging Tech Talk on Aligning Observability Costs with Business Value: Practical ...

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Did you know that for Splunk Enterprise 9.4, Python 3.9 is the default interpreter? This shift is not just a ...