Splunk Search

How to obtain a list of all devices and their names of everything in Splunk query?

coulouteg
New Member

Good morning Guys,

I am relatively new to Splunk. I am trying to obtain a list of all the "Devices" and their "Names" of everything in my splunk environment. I would appreciate it if someone would provide me with that simple query.

Thanks

Tags (1)
0 Karma

nickhills
Ultra Champion

To see all of your forwarders which are reporting into spunk you can use:

| metadata type=hosts index=_internal

However, if you have systems reporting in purely via syslog, you will need to do a bit more work.

If my comment helps, please give it a thumbs up!
0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...