Splunk Search

How to find App based on source types and indexes?

SplunkDash
Motivator

Hello 

I have a quick question. are there any ways we can find a specific index name that was used within which App? The reason I am asking since we have a number of apps, but I forgot which apps I used for index wincbs? Thank you so much in advance for your support in these efforts.   

Tags (1)
0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @SplunkDash 

try this

 

| rest /services/data/indexes | table title eai:acl.app
| rename title as Index eai:acl.app as app

SplunkDash
Motivator

Hello @SanjayReddy 

Thank you so much for your quick response. This is working and gives me the list of the apps and their corresponding indexes in my indexer cluster. But I have some apps in Deployment Server, how I would implement this and find the apps for corresponding indexes/source types. Thank you again.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Transforming Financial Data into Fraud Intelligence

Every day, banks and financial companies handle millions of transactions, logins, and customer interactions ...

How to send events & findings from AWS to Splunk using Amazon EventBridge

Amazon EventBridge is a serverless service that uses events to connect application components together, making ...

Exciting News: The AppDynamics Community Joins Splunk!

Hello Splunkers,   I’d like to introduce myself—I’m Ryan, the former AppDynamics Community Manager, and I’m ...