The instruction came from on-high to clean up indexes, now I'm going through and noticing indexes that I have not created. Is there a way to tell who created a specific index?
Hi @stcrispan ,
Did you have a chance to check out @HiroshiSatoh answer? If it worked, please resolve this post by approving it! If your problem is still not solved, keep us updated so that someone else can help you.
Thanks for posting!
You can use this search to get index information.
| rest /services/data/indexes OR | rest splunk_server=(your indexser) /services/data/indexes
