Splunk Search

How to find App based on source types and indexes?

SplunkDash
Motivator

Hello 

I have a quick question. are there any ways we can find a specific index name that was used within which App? The reason I am asking since we have a number of apps, but I forgot which apps I used for index wincbs? Thank you so much in advance for your support in these efforts.   

Tags (1)
0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @SplunkDash 

try this

 

| rest /services/data/indexes | table title eai:acl.app
| rename title as Index eai:acl.app as app

SplunkDash
Motivator

Hello @SanjayReddy 

Thank you so much for your quick response. This is working and gives me the list of the apps and their corresponding indexes in my indexer cluster. But I have some apps in Deployment Server, how I would implement this and find the apps for corresponding indexes/source types. Thank you again.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2025 SplunkTrust is officially open! If you ...

Splunk Answers Content Calendar, June Edition II

Get ready to dive into Splunk Dashboard panels this week! We'll be tackling common questions around ...

Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...

This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...