Deployment Architecture

How to retrieve host names from forwarder management

kavyamohan
Explorer

I have two host names under clients in Forwarder management. I need to export these host names to a excel or csv so that i can use it in a search. Is that possible?

0 Karma
1 Solution

gcusello
SplunkTrust
SplunkTrust

Hi kavyamohan,
you can use something like

| REST /services/deployment/server/clients 

You can find fore info at https://docs.splunk.com/Documentation/Splunk/6.1.2/RESTAPI/RESTdeploy#deployment.2Fserver.2Fclient

Anyway, you could have the host list also searching in _internal

| metasearch index=_internal
| dedup host
| sort host
| table host

Ciao.
Giuseppe

View solution in original post

gcusello
SplunkTrust
SplunkTrust

Hi kavyamohan,
you can use something like

| REST /services/deployment/server/clients 

You can find fore info at https://docs.splunk.com/Documentation/Splunk/6.1.2/RESTAPI/RESTdeploy#deployment.2Fserver.2Fclient

Anyway, you could have the host list also searching in _internal

| metasearch index=_internal
| dedup host
| sort host
| table host

Ciao.
Giuseppe

kavyamohan
Explorer

Yes thank you so much. It worked. I am able to get the list.

0 Karma

gcusello
SplunkTrust
SplunkTrust

You're welcome.
Ciao and next time.
Giuseppe

0 Karma
Get Updates on the Splunk Community!

The All New Performance Insights for Splunk

Splunk gives you amazing tools to analyze system data and make business-critical decisions, react to issues, ...

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...