Security

How to find origin of an index?

stcrispan
Communicator

The instruction came from on-high to clean up indexes, now I'm going through and noticing indexes that I have not created.

Is there a way to tell who created a specific index?

0 Karma

evania
Community Manager
Community Manager

Hi @stcrispan ,

Did you have a chance to check out @HiroshiSatoh answer? If it worked, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help you.

Thanks for posting!

0 Karma

HiroshiSatoh
Champion

You can use this search to get index information.

| rest /services/data/indexes
OR
| rest splunk_server=(your indexser) /services/data/indexes
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!