Splunk Search

How to find App based on source types and indexes?

SplunkDash
Motivator

Hello 

I have a quick question. are there any ways we can find a specific index name that was used within which App? The reason I am asking since we have a number of apps, but I forgot which apps I used for index wincbs? Thank you so much in advance for your support in these efforts.   

Tags (1)
0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @SplunkDash 

try this

 

| rest /services/data/indexes | table title eai:acl.app
| rename title as Index eai:acl.app as app

SplunkDash
Motivator

Hello @SanjayReddy 

Thank you so much for your quick response. This is working and gives me the list of the apps and their corresponding indexes in my indexer cluster. But I have some apps in Deployment Server, how I would implement this and find the apps for corresponding indexes/source types. Thank you again.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...