Splunk Search

Efficient way to search splunk_server in pre-6.x Splunk?

the_wolverine
Champion

I'm looking for a way to find out which splunk_server contains data for my index for older versions of Splunk. tstats doesn't work and metadata is lacking for splunk_server.

Any suggestions?

0 Karma
1 Solution

the_wolverine
Champion
| metasearch index=* | stats count by index,splunk_server

View solution in original post

0 Karma

the_wolverine
Champion
| metasearch index=* | stats count by index,splunk_server
0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...