Splunk Search

What is the Splunk search to list the forwarders, indexers, and deployment servers in an environment?

kranthimutyala
Path Finder

What is the Splunk search to list the forwarders, indexers, and deployment servers in an environment?

0 Karma

rickrowe
New Member
index=_internal source=*metrics.log group=tcpin_connections | eval sourceHost=if(isnull(hostname), sourceHost,hostname) | rename connectionType as Type  | search Type!=cooked | rename version AS "Version", sourceIp AS "Source IP", sourceHost AS "Host", destPort AS "Port" | fields Type, "Source IP", Host, Port, kb, tcp_eps, tcp_Kprocessed, tcp_KBps, splunk_server, Version | eval Hour=relative_time(_time,"@h")  | stats  avg(tcp_KBps) sum(tcp_Kprocessed), BY Host, Type, "Source IP", Port, Version 
0 Karma

kranthimutyala
Path Finder

On splunk search head this should be executed right

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...