Splunk Cloud Platform

Pulling Complete Sourcetype information from splunk

anandhalagaras1
Path Finder

Hi Team,

Is there any way to find out what are the sourcetypes completely reporting in Splunk for both index and as well as for non-internal index for last 30 days so if we have any query to pull out those information it would be really helpful.

 

 

0 Karma
1 Solution

scelikok
Champion

 Hi @anandhalagaras1,

You can list all sourcetypes using below query;

| metadata type=sourcetypes index=_* index=*
If this reply helps you an upvote is appreciated.

View solution in original post

scelikok
Champion

 Hi @anandhalagaras1,

You can list all sourcetypes using below query;

| metadata type=sourcetypes index=_* index=*
If this reply helps you an upvote is appreciated.

View solution in original post

anandhalagaras1
Path Finder

@scelikok ,

 

Thank you . I could able to pull the information from Splunk.

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.