Splunk Search

How to create a search to get a list of Indices?

New Member

Hello Splunkers,

I am relatively new with Splunk and was wondering if someone out there can please tell me which query to run to get a list of splunk INDEXes on my environment. Any assistance you can provide in that regard would be greatly appreciated.

Thanks you in advance.

Cosmo.

0 Karma

SplunkTrust
SplunkTrust

There are a few ways to do that.
Go to Settings->indexes.
*Run the query | rest /services/data/indexes
*Run the query `| tstats count where index=
by index | fields - count`
And probably others.

---
If this reply helps you, an upvote would be appreciated.
0 Karma