Pulling Complete Sourcetype information from splunk

[anandhalagaras1]

Hi Team,

Is there any way to find out what are the sourcetypes completely reporting in Splunk for both index and as well as for non-internal index for last 30 days so if we have any query to pull out those information it would be really helpful.

[scelikok · Accepted solution]

 Hi @anandhalagaras1,

You can list all sourcetypes using below query;

| metadata type=sourcetypes index=_* index=*

[anandhalagaras1]

@scelikok ,

Thank you . I could able to pull the information from Splunk.