Splunk Search

How can I generate a report with a list of deployed forwarders and their installation path on the remote servers?

anoopambli
Communicator

Is there a way I can generate a report with a list of deployed forwarders and its installation path on the remote server? I want that data to work on fine tuning the automation we use for forwarder installation.

0 Karma
1 Solution

pradeepkumarg
Influencer


| tstats values(host) as host, dc(host) as count where index=_internal GROUPBY source | search source=*splunkd.log

View solution in original post

pradeepkumarg
Influencer


| tstats values(host) as host, dc(host) as count where index=_internal GROUPBY source | search source=*splunkd.log

anoopambli
Communicator

That worked, thank you very much.

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

  Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...