Splunk Search

How can I generate a report with a list of deployed forwarders and their installation path on the remote servers?

anoopambli
Communicator

Is there a way I can generate a report with a list of deployed forwarders and its installation path on the remote server? I want that data to work on fine tuning the automation we use for forwarder installation.

0 Karma
1 Solution

pradeepkumarg
Influencer


| tstats values(host) as host, dc(host) as count where index=_internal GROUPBY source | search source=*splunkd.log

View solution in original post

pradeepkumarg
Influencer


| tstats values(host) as host, dc(host) as count where index=_internal GROUPBY source | search source=*splunkd.log

anoopambli
Communicator

That worked, thank you very much.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...