Splunk Search

Efficient way to search splunk_server in pre-6.x Splunk?

Champion

I'm looking for a way to find out which splunk_server contains data for my index for older versions of Splunk. tstats doesn't work and metadata is lacking for splunk_server.

Any suggestions?

0 Karma
1 Solution

Champion
| metasearch index=* | stats count by index,splunk_server

View solution in original post

0 Karma

Champion
| metasearch index=* | stats count by index,splunk_server

View solution in original post

0 Karma