Monitoring Splunk

How do I get a complete list of ALL my indexers created in Splunk Ent.

SamHTexas
Builder

How do I get a complete list of ALL my indexers created in Splunk Ent. Please see my SPL. It only lists the main indexes.

| tstats count where index=* by splunk_server | fields - count
Labels (1)
Tags (1)
0 Karma

scelikok
SplunkTrust
SplunkTrust

Hi @SamHTexas,

You can run below on a search head to see all of your indexers with some details.

| rest splunk_server=local /services/search/distributed/peers 
| table cluster_label peerName host host_fqdn cpu_arch numberOfCores numberOfVirtualCores physicalMemoryMB os_name os_version version status startup_time | convert ctime(*time)

 

If this reply helps you an upvote and "Accept as Solution" is appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The Monitoring Console and Cluster Manager both should have a full list of indexers, with the CM likely to be more accurate.  The Inherited Development manual (https://docs.splunk.com/Documentation/Splunk/8.1.3/InheritedDeployment/Introduction) offers other suggestions for finding what instances you have.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...