Monitoring Splunk

Report generate

sahildb
Engager

We need to generate report in splunk which can tell us my log sources and all server details are reporting to splunk.

 

 

is there any query we can use to fetch all the details.

Labels (1)
0 Karma
1 Solution

manjunathmeti
Champion

Hi @sahildb ,

Use tstats command to get the data.

| tstats count where index="*" by host

| tstats count where index="*" by source

 

If this reply helps you, an upvote/like would be appreciated.

View solution in original post

0 Karma

manjunathmeti
Champion

Hi @sahildb ,

Use tstats command to get the data.

| tstats count where index="*" by host

| tstats count where index="*" by source

 

If this reply helps you, an upvote/like would be appreciated.

0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...