Hi all, How do I show all sources for a specific host? I can query for a specific host a la: host="myhost" and then hit "source" in the sidebar, but that only shows the top ten sources on that host. I don't know how to see more than that. I have seen an example of how to list all sources for all hosts by host, but that's extremely long running in our environment and not really what we need. I just need to see the sources for specific hosts to verify that our indexing config is setup correctly and the logs that we want to be indexed are showing up as sources. I'm guessing this is any easy one, but I am splunk noob and haven't been able to figure it out. Any help is appreciated. Thanks!
This should be the fastest method per my knowledge
This search will provide following fields:-
From which you can use source field for your requirement.