Hi japala,
DMC should be the best option, but it will only show your environment correct if all internal logs are forwarded to the indexers and the Splunk instance running DMC has all indexers as search peer, see the docs for more detail http://docs.splunk.com/Documentation/Splunk/6.3.0/DMC/DMCoverview
cheers, MuS
... View more