Knowledge Management

Overview of events and feeds coming in

ecanmaster
Explorer

Is there a quick way on getting a list of all events coming in and all feeds coming in?

Would it also be possible to see which feeds are being used for the data models?
And also getting a list of feeds that are not being used in searches?

Tags (1)
0 Karma
1 Solution

woodcock
Esteemed Legend

There are apps for this kind of thing on splunkbase. You can start with this:

index=* | stats values(tag) BY sourcetype

The tags will indicate which datamodels each sourcetype goes into.

View solution in original post

0 Karma

woodcock
Esteemed Legend

There are apps for this kind of thing on splunkbase. You can start with this:

index=* | stats values(tag) BY sourcetype

The tags will indicate which datamodels each sourcetype goes into.

0 Karma
Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...