Monitoring Splunk

How do I get a complete list of ALL my indexers created in Splunk Ent.

SamHTexas
Communicator

How do I get a complete list of ALL my indexers created in Splunk Ent. Please see my SPL. It only lists the main indexes.

| tstats count where index=* by splunk_server | fields - count
Labels (1)
Tags (1)
0 Karma

scelikok
Influencer

Hi @SamHTexas,

You can run below on a search head to see all of your indexers with some details.

| rest splunk_server=local /services/search/distributed/peers 
| table cluster_label peerName host host_fqdn cpu_arch numberOfCores numberOfVirtualCores physicalMemoryMB os_name os_version version status startup_time | convert ctime(*time)

 

If this reply helps you an upvote is appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The Monitoring Console and Cluster Manager both should have a full list of indexers, with the CM likely to be more accurate.  The Inherited Development manual (https://docs.splunk.com/Documentation/Splunk/8.1.3/InheritedDeployment/Introduction) offers other suggestions for finding what instances you have.

---
If this reply helps you, an upvote would be appreciated.
0 Karma