- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
Are there any queries I can run from SPLUNK search head to find:
1. all configured DB Connections and their associated index/source Types in SPLUNK. Any help will be highly appreciated!
2. all Add On are currently using in SPLUK?
Any help will be highly appreciated, thank you!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
you can find list of stanzas with sourcetypes and indexes using rest command to all conf-inputs. You can define a certain server, or use * to query all. Basically everything you have in inputs.conf is available like this.
| rest splunk_server=* /services/configs/conf-inputs
| fillnull value="n/a"
| stats values(index) values(sourcetype) by eai:acl.app splunk_server title
Here you can see list of all apps per server:
| rest splunk_server=* /services/apps/local
| search disabled=0
| stats values(label) by splunk_server
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
you can find list of stanzas with sourcetypes and indexes using rest command to all conf-inputs. You can define a certain server, or use * to query all. Basically everything you have in inputs.conf is available like this.
| rest splunk_server=* /services/configs/conf-inputs
| fillnull value="n/a"
| stats values(index) values(sourcetype) by eai:acl.app splunk_server title
Here you can see list of all apps per server:
| rest splunk_server=* /services/apps/local
| search disabled=0
| stats values(label) by splunk_server
![](/skins/images/396DDBEEAC295EB5FEC41FF128E8AC0A/responsive_peak/images/icon_anonymous_message.png)