Splunk Search

How can I generate a report with a list of deployed forwarders and their installation path on the remote servers?

anoopambli
Communicator

Is there a way I can generate a report with a list of deployed forwarders and its installation path on the remote server? I want that data to work on fine tuning the automation we use for forwarder installation.

0 Karma
1 Solution

pradeepkumarg
Influencer


| tstats values(host) as host, dc(host) as count where index=_internal GROUPBY source | search source=*splunkd.log

View solution in original post

pradeepkumarg
Influencer


| tstats values(host) as host, dc(host) as count where index=_internal GROUPBY source | search source=*splunkd.log

anoopambli
Communicator

That worked, thank you very much.

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...