Monitoring Splunk

Report generate

sahildb
Engager

We need to generate report in splunk which can tell us my log sources and all server details are reporting to splunk.

 

 

is there any query we can use to fetch all the details.

Labels (1)
0 Karma
1 Solution

manjunathmeti
Champion

Hi @sahildb ,

Use tstats command to get the data.

| tstats count where index="*" by host

| tstats count where index="*" by source

 

If this reply helps you, an upvote/like would be appreciated.

View solution in original post

0 Karma

manjunathmeti
Champion

Hi @sahildb ,

Use tstats command to get the data.

| tstats count where index="*" by host

| tstats count where index="*" by source

 

If this reply helps you, an upvote/like would be appreciated.

0 Karma
Get Updates on the Splunk Community!

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...

Purpose in Action: How Splunk Is Helping Power an Inclusive Future for All

At Cisco, purpose isn’t a tagline—it’s a commitment. Cisco’s FY25 Purpose Report outlines how the company is ...

[Upcoming Webinar] Demo Day: Transforming IT Operations with Splunk

Join us for a live Demo Day at the Cisco Store on January 21st 10:00am - 11:00am PST In the fast-paced world ...