is there any internal index which can tell me that this host is sending logs to how many indexes and which sourcetype.
you can look at the index=_internal source=*metrics.log for data from each host (h), sourcetype (s)
https://docs.splunk.com/Documentation/Splunk/7.2.4/Troubleshooting/Aboutmetricslog
