We need to generate report in splunk which can tell us my log sources and all server details are reporting to splunk.
is there any query we can use to fetch all the details.
Hi @sahildb ,
Use tstats command to get the data.
| tstats count where index="*" by host
| tstats count where index="*" by source
If this reply helps you, an upvote/like would be appreciated.
Hi @sahildb ,
Use tstats command to get the data.
| tstats count where index="*" by host
| tstats count where index="*" by source
If this reply helps you, an upvote/like would be appreciated.