Knowledge Management

Tag list by index


Hi , 
I would like to ask what is the fastest way to list all tags on a certain index.

We do have millions of data on an index: "index_test1" , and i want to get all the tags on this index.

  • | stats values(tag) as tag - 280.483 seconds
  • | fieldsummary maxvals=10 tag -   200.979 seconds

Is there faster way to achieve it than listed above ?

Labels (1)
Tags (1)
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!