Splunk Search

Deployed Apps Search


I would like to determine how many times an app on a deployment server has been deployed.  I'm not concerned with the host information.  I'm trying to determine which Apps are no longer being used and can be archived.  I suspect it would come from the | rest command.

| rest splunk_server= /services/deployment/server/clients

I'm just not sure which fields and how to accurately calculate this. Looking for suggestions.

Labels (2)
Tags (1)
0 Karma


That information may be in the Deployment Server's logs.  Look for "DS" in the messages (I don't have access to a DS to check).

Be aware, however, that lack of downloads does not mean the app is not used.  It's possible the app hasn't changed in a while so no clients have needed to download it.

If this reply helps you, an upvote would be appreciated.
0 Karma