Hello I want to see all indexes latest data time. like when did the latest data came to this index.
You can do
| tstats max(_time) as latest where index=* by index
but depending on the time range you use for the search it will only return data for those indexes that have data during that timespan
You can also do
| rest /services/data/indexes count=0
| table title maxTime minTime
You can do
| tstats max(_time) as latest where index=* by index
but depending on the time range you use for the search it will only return data for those indexes that have data during that timespan
You can also do
| rest /services/data/indexes count=0
| table title maxTime minTime