Deployment Architecture

Splunk Query to get all configured DB Connections and their associated index/sourcetypes inSPLUNK

SplunkDash
Motivator

Hello,

Are there any queries I can run from SPLUNK search head to find:

1. all configured DB Connections and their associated index/source Types in SPLUNK. Any help will be highly appreciated!

2. all Add On are currently using in SPLUK?

 

Any help will be highly appreciated, thank you!

Labels (1)
Tags (2)
0 Karma
1 Solution

smurf
Communicator

Hi,

you can find list of stanzas with sourcetypes and indexes using rest command to all conf-inputs. You can define a certain server, or use * to query all. Basically everything you have in inputs.conf is available like this.

| rest splunk_server=* /services/configs/conf-inputs
| fillnull value="n/a"
| stats values(index) values(sourcetype) by eai:acl.app splunk_server title

 Here you can see list of all apps per server:

| rest splunk_server=* /services/apps/local 
| search disabled=0
| stats values(label) by splunk_server

View solution in original post

smurf
Communicator

Hi,

you can find list of stanzas with sourcetypes and indexes using rest command to all conf-inputs. You can define a certain server, or use * to query all. Basically everything you have in inputs.conf is available like this.

| rest splunk_server=* /services/configs/conf-inputs
| fillnull value="n/a"
| stats values(index) values(sourcetype) by eai:acl.app splunk_server title

 Here you can see list of all apps per server:

| rest splunk_server=* /services/apps/local 
| search disabled=0
| stats values(label) by splunk_server
Get Updates on the Splunk Community!

Buttercup Games: Further Dashboarding Techniques

Hello! We are excited to kick off a new series of blogs from SplunkTrust member ITWhisperer, who demonstrates ...

Message Parsing in SOCK

Introduction This blog post is part of an ongoing series on SOCK enablement. In this blog post, I will write ...

Exploring the OpenTelemetry Collector’s Kubernetes annotation-based discovery

We’ve already explored a few topics around observability in a Kubernetes environment -- Common Failures in a ...