Deployment Architecture

Splunk Query to get all configured DB Connections and their associated index/sourcetypes inSPLUNK

SplunkDash
Motivator

Hello,

Are there any queries I can run from SPLUNK search head to find:

1. all configured DB Connections and their associated index/source Types in SPLUNK. Any help will be highly appreciated!

2. all Add On are currently using in SPLUK?

 

Any help will be highly appreciated, thank you!

Labels (1)
Tags (2)
0 Karma
1 Solution

smurf
Communicator

Hi,

you can find list of stanzas with sourcetypes and indexes using rest command to all conf-inputs. You can define a certain server, or use * to query all. Basically everything you have in inputs.conf is available like this.

| rest splunk_server=* /services/configs/conf-inputs
| fillnull value="n/a"
| stats values(index) values(sourcetype) by eai:acl.app splunk_server title

 Here you can see list of all apps per server:

| rest splunk_server=* /services/apps/local 
| search disabled=0
| stats values(label) by splunk_server

View solution in original post

smurf
Communicator

Hi,

you can find list of stanzas with sourcetypes and indexes using rest command to all conf-inputs. You can define a certain server, or use * to query all. Basically everything you have in inputs.conf is available like this.

| rest splunk_server=* /services/configs/conf-inputs
| fillnull value="n/a"
| stats values(index) values(sourcetype) by eai:acl.app splunk_server title

 Here you can see list of all apps per server:

| rest splunk_server=* /services/apps/local 
| search disabled=0
| stats values(label) by splunk_server
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...