Is there a page view that shows all Source's for an Index

[gregoryrecords]

Aside from doing a search is there a configuration page that will show me all the sources sending logs to an index at a quick glance?

[spayneort]

|tstats values(sourcetype) as sourcetypes, values(source) as sources where index=* by index

[nvanderwalt_spl · Accepted solution]

The user that runs |metadata needs get_metadata capability, which the user role should have by default, but you may want to check that.

Make sure you select the correct time in the timepicker, and change the index name as appropriate

Also, the command listed above will return sourcetypes. If you want sources, you need
| metadata type=sources index=indexname

[jkat54]

Not other than the data summary on the default search view.

Here's a good search for that though:

| metadata type=sourcetypes index=yourindex 

[jkat54]

You can make your own dashboard using the above.

[gregoryrecords]

Hmmm thats not returning anything for me.