Monitoring Splunk

How do I get a complete list of ALL my indexers created in Splunk Ent.

SamHTexas
Contributor

How do I get a complete list of ALL my indexers created in Splunk Ent. Please see my SPL. It only lists the main indexes.

| tstats count where index=* by splunk_server | fields - count
Labels (1)
Tags (1)
0 Karma

scelikok
Champion

Hi @SamHTexas,

You can run below on a search head to see all of your indexers with some details.

| rest splunk_server=local /services/search/distributed/peers 
| table cluster_label peerName host host_fqdn cpu_arch numberOfCores numberOfVirtualCores physicalMemoryMB os_name os_version version status startup_time | convert ctime(*time)

 

If this reply helps you an upvote is appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The Monitoring Console and Cluster Manager both should have a full list of indexers, with the CM likely to be more accurate.  The Inherited Development manual (https://docs.splunk.com/Documentation/Splunk/8.1.3/InheritedDeployment/Introduction) offers other suggestions for finding what instances you have.

---
If this reply helps you, an upvote would be appreciated.
0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!