Splunk Search

How to get host and sourcetype combinations that do not fit in any Datamodel

Path Finder


I'm trying to retrieve all the host-sourcetype combinations that are not captured by any Datamodel. I have a perimeter with all the assets to verify and check if they fit some DM or not.

I can't crisp my mind around unfortunately.

Is there anyone with any idea?


Thank you.

Labels (1)
Tags (2)
0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...