Splunk Query to get all configured DB Connections and their associated index/sourcetypes inSPLUNK

[SplunkDash]

Hello,

Are there any queries I can run from SPLUNK search head to find:

1. all configured DB Connections and their associated index/source Types in SPLUNK. Any help will be highly appreciated!

2. all Add On are currently using in SPLUK?

Any help will be highly appreciated, thank you!

[smurf · Accepted solution]

Hi,

you can find list of stanzas with sourcetypes and indexes using rest command to all conf-inputs. You can define a certain server, or use * to query all. Basically everything you have in inputs.conf is available like this.

| rest splunk_server=* /services/configs/conf-inputs
| fillnull value="n/a"
| stats values(index) values(sourcetype) by eai:acl.app splunk_server title

 Here you can see list of all apps per server:

| rest splunk_server=* /services/apps/local 
| search disabled=0 
| stats values(label) by splunk_server