Is there an easy way of exporting a list of all my forwarder clients from my deployment server to csv? I just need a list of them without having to search for them via active data in Splunk.
| rest /services/deployment/server/clients | table hostname
This one works for me. Have to add the " | table hostname "
adding "|table hostname" prevent the browser to hang because there are maybe too many columns.
On the DS you should be able to run
| rest /services/deployment/server/clients to generate a base search to cleanup/filter then export.
This returns nothing on my deployment server, despite having ~126 clients. Any ideas? I really could use something like this though, as the immutability of the built in "Forwarder management" dashboard makes it essentially useless.
ditto, doesn't work
Works for me when running it on the UI of the deployment server.
| rest /services/deployment/server/clients | table hostname,ip
Referencing from here
Reviving this from the dead in case someone else suffers from the "no results":
| rest splunk_server=local /services/deployment/server/clients | table hostname,ip
same here.. nothing.. another query that doesn't work.