How to see what kind of logs are indexing to each indexer
can please help with splunk basic query.
To get all in one go
| tstats count where (index=_* OR index=*) by index, sourcetype, source
To get all in one go
| tstats count where (index=_* OR index=*) by index, sourcetype, source
| tstats count where index=* by source
(to get the list of source getting index)
| tstats count where index=* by source
(to get the list of sourcetype getting index)