Splunk Search

How to query to out the configurations for any particular app or index using Splunk web UI?

blbr123
Path Finder

Hi All,

Is there any search query to find out the configurations for any particular app or index using splunk web UI?

Labels (2)
Tags (3)
0 Karma

tshah-splunk
Splunk Employee
Splunk Employee

Hi @blbr123,

You can get the details of indexes using the below search query. Please specify splunk_server as per your environment

| rest services/data/indexes

 Similarly, information related to the apps can be found using below rest endpoint

|rest services/apps/local
---
If you find the answer helpful, an upvote/karma is appreciated
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

those are good starting points to get a list of your apps and indexes, but there are lot of other REST endpoints to get more information about your apps. https://docs.splunk.com/Documentation/Splunk/8.2.4/RESTREF/RESTconf is REST API Reference and here is on conf talk where apps' configs have get via it https://conf.splunk.com/files/2019/slides/FN1315.pdf. This is something which you really need to read.

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...