Splunk Cloud
Provide Splunk Cloud feedback in this confidential UX survey by June 17
for a chance to win a $200 Amazon gift card!

Pulling Complete Sourcetype information from splunk

anandhalagaras1
Path Finder

Hi Team,

Is there any way to find out what are the sourcetypes completely reporting in Splunk for both index and as well as for non-internal index for last 30 days so if we have any query to pull out those information it would be really helpful.

 

 

0 Karma
1 Solution

scelikok
Champion

 Hi @anandhalagaras1,

You can list all sourcetypes using below query;

| metadata type=sourcetypes index=_* index=*
If this reply helps you an upvote is appreciated.

View solution in original post

scelikok
Champion

 Hi @anandhalagaras1,

You can list all sourcetypes using below query;

| metadata type=sourcetypes index=_* index=*
If this reply helps you an upvote is appreciated.

View solution in original post

anandhalagaras1
Path Finder

@scelikok ,

 

Thank you . I could able to pull the information from Splunk.

0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!