Splunk Cloud

Pulling Complete Sourcetype information from splunk

anandhalagaras1
Path Finder

Hi Team,

Is there any way to find out what are the sourcetypes completely reporting in Splunk for both index and as well as for non-internal index for last 30 days so if we have any query to pull out those information it would be really helpful.

 

 

0 Karma
1 Solution

scelikok
Champion

 Hi @anandhalagaras1,

You can list all sourcetypes using below query;

| metadata type=sourcetypes index=_* index=*
If this reply helps you an upvote is appreciated.

View solution in original post

scelikok
Champion

 Hi @anandhalagaras1,

You can list all sourcetypes using below query;

| metadata type=sourcetypes index=_* index=*
If this reply helps you an upvote is appreciated.

View solution in original post

anandhalagaras1
Path Finder

@scelikok ,

 

Thank you . I could able to pull the information from Splunk.

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!