Hey, I am using splunk 6.x and on another system splunk 8.x with similar data backends.    when I do a search for: index=myIndex earliest=-30  |head 10 it works on 6.x but not 8.x   though when i use the time picker ... View more

We are in the midst of a migration from one server to the next, and need to see if there are queries running against specific indexes, virtual indexes and sourcetypes. I have been trying a number of queries against the audit log but can't find a way to extract the following information used by all active queries & reports. 1. name and count of indexes   2. name and count of virtual indexes 3. name and count of sourcetypes Been searching for hours, any help appreciated.  ... View more