Splunk Search

How to query to out the configurations for any particular app or index using Splunk web UI?

blbr123
Path Finder

Hi All,

Is there any search query to find out the configurations for any particular app or index using splunk web UI?

Labels (1)
Tags (3)
0 Karma

tshah-splunk
Splunk Employee
Splunk Employee

Hi @blbr123,

You can get the details of indexes using the below search query. Please specify splunk_server as per your environment

| rest services/data/indexes

 Similarly, information related to the apps can be found using below rest endpoint

|rest services/apps/local
---
If you find the answer helpful, an upvote/karma is appreciated
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

those are good starting points to get a list of your apps and indexes, but there are lot of other REST endpoints to get more information about your apps. https://docs.splunk.com/Documentation/Splunk/8.2.4/RESTREF/RESTconf is REST API Reference and here is on conf talk where apps' configs have get via it https://conf.splunk.com/files/2019/slides/FN1315.pdf. This is something which you really need to read.

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...