Splunk Search

How to find App based on source types and indexes?

SplunkDash
Motivator

Hello 

I have a quick question. are there any ways we can find a specific index name that was used within which App? The reason I am asking since we have a number of apps, but I forgot which apps I used for index wincbs? Thank you so much in advance for your support in these efforts.   

Tags (1)
0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @SplunkDash 

try this

 

| rest /services/data/indexes | table title eai:acl.app
| rename title as Index eai:acl.app as app

SplunkDash
Motivator

Hello @SanjayReddy 

Thank you so much for your quick response. This is working and gives me the list of the apps and their corresponding indexes in my indexer cluster. But I have some apps in Deployment Server, how I would implement this and find the apps for corresponding indexes/source types. Thank you again.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...