Splunk Search

How can I generate a report with a list of deployed forwarders and their installation path on the remote servers?

anoopambli
Communicator

Is there a way I can generate a report with a list of deployed forwarders and its installation path on the remote server? I want that data to work on fine tuning the automation we use for forwarder installation.

0 Karma
1 Solution

pradeepkumarg
Influencer


| tstats values(host) as host, dc(host) as count where index=_internal GROUPBY source | search source=*splunkd.log

View solution in original post

pradeepkumarg
Influencer


| tstats values(host) as host, dc(host) as count where index=_internal GROUPBY source | search source=*splunkd.log

anoopambli
Communicator

That worked, thank you very much.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...