How to check whether splunk is getting data from the server or not ??

[prashant_001]

I have list of servers, I need a query to check whether splunk is getting data from the server or not ??

[isoutamo]

Hi

you can get list of serves by: 

| metadata type=hosts index=*

Then you can use e.g. lookup where you have your "wanted"  list and based on that check towards it.

There is also quite many apps for that. You can found those quite easily from previous posts.

r. Ismo