Deployment Architecture

Splunk Query to get all configured DB Connections and their associated index/sourcetypes inSPLUNK

SplunkDash
Motivator

Hello,

Are there any queries I can run from SPLUNK search head to find:

1. all configured DB Connections and their associated index/source Types in SPLUNK. Any help will be highly appreciated!

2. all Add On are currently using in SPLUK?

 

Any help will be highly appreciated, thank you!

Labels (1)
Tags (2)
0 Karma
1 Solution

smurf
Communicator

Hi,

you can find list of stanzas with sourcetypes and indexes using rest command to all conf-inputs. You can define a certain server, or use * to query all. Basically everything you have in inputs.conf is available like this.

| rest splunk_server=* /services/configs/conf-inputs
| fillnull value="n/a"
| stats values(index) values(sourcetype) by eai:acl.app splunk_server title

 Here you can see list of all apps per server:

| rest splunk_server=* /services/apps/local 
| search disabled=0
| stats values(label) by splunk_server

View solution in original post

smurf
Communicator

Hi,

you can find list of stanzas with sourcetypes and indexes using rest command to all conf-inputs. You can define a certain server, or use * to query all. Basically everything you have in inputs.conf is available like this.

| rest splunk_server=* /services/configs/conf-inputs
| fillnull value="n/a"
| stats values(index) values(sourcetype) by eai:acl.app splunk_server title

 Here you can see list of all apps per server:

| rest splunk_server=* /services/apps/local 
| search disabled=0
| stats values(label) by splunk_server
Get Updates on the Splunk Community!

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...