I would like to determine how many times an app on a deployment server has been deployed. I'm not concerned with the host information. I'm trying to determine which Apps are no longer being used and can be archived. I suspect it would come from the | rest command.
| rest splunk_server=127.0.0.1 /services/deployment/server/clients
I'm just not sure which fields and how to accurately calculate this. Looking for suggestions.
That information may be in the Deployment Server's logs. Look for "DS" in the messages (I don't have access to a DS to check).
Be aware, however, that lack of downloads does not mean the app is not used. It's possible the app hasn't changed in a while so no clients have needed to download it.