Splunk Search

What is the Splunk search to list the forwarders, indexers, and deployment servers in an environment?

kranthimutyala
Path Finder

What is the Splunk search to list the forwarders, indexers, and deployment servers in an environment?

0 Karma

rickrowe
New Member
index=_internal source=*metrics.log group=tcpin_connections | eval sourceHost=if(isnull(hostname), sourceHost,hostname) | rename connectionType as Type  | search Type!=cooked | rename version AS "Version", sourceIp AS "Source IP", sourceHost AS "Host", destPort AS "Port" | fields Type, "Source IP", Host, Port, kb, tcp_eps, tcp_Kprocessed, tcp_KBps, splunk_server, Version | eval Hour=relative_time(_time,"@h")  | stats  avg(tcp_KBps) sum(tcp_Kprocessed), BY Host, Type, "Source IP", Port, Version 
0 Karma

kranthimutyala
Path Finder

On splunk search head this should be executed right

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...