Getting Data In

How can I use btool to find where a specific index was created?

brentrmc
Explorer

I've been tasked with using btool (in debug mode) to find where the settings for the “onboarding” index was written by the GUI, and can't seem to figure out exactly how to do so. Any help is much appreciated!

Tags (1)
0 Karma
1 Solution

diogofgm
SplunkTrust
SplunkTrust

Use the following command on CLI:

splunk btool indexes list --debug your_index_name

------------
Hope I was able to help you. If so, some karma would be appreciated.

View solution in original post

diogofgm
SplunkTrust
SplunkTrust

Use the following command on CLI:

splunk btool indexes list --debug your_index_name

------------
Hope I was able to help you. If so, some karma would be appreciated.

brentrmc
Explorer

Awesome, thank you!

0 Karma
Get Updates on the Splunk Community!

The Great Resilience Quest: 5th Leaderboard Update

The fifth leaderboard update for The Great Resilience Quest is out >> 🏆 Check out the ...

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...