how to search for user id's and any information that splunk has

[mg99]

we have a user ID that we are looking to find out what splunk has collected.  what is the serach that i use?

[gcusello]

Hi @mg99 ,

your request isn't so clear, could you better detail it?

If you want to know which information you have, you could run a search that extract the list of sourcetypes:

index=*
| stats 
     values(host) AS host
     values(index) AS index
     count
     BY sourcetype

Ciao.

Giuseppe