Deployed Apps Search

[jason_hotchkiss]

I would like to determine how many times an app on a deployment server has been deployed.  I'm not concerned with the host information.  I'm trying to determine which Apps are no longer being used and can be archived.  I suspect it would come from the | rest command.

| rest splunk_server=127.0.0.1 /services/deployment/server/clients

I'm just not sure which fields and how to accurately calculate this. Looking for suggestions.

[richgalloway]

That information may be in the Deployment Server's logs.  Look for "DS" in the messages (I don't have access to a DS to check).

Be aware, however, that lack of downloads does not mean the app is not used.  It's possible the app hasn't changed in a while so no clients have needed to download it.