Greetings, I have a search that list every index and what sourcetypes are contained within it. |tstats values(sourcetype) where index=* by index What I like about it is that I can see each index and a list of all of the sourcetypes specific tot that index. I'm trying to see this same data format by with a column of the indexes and a column of all of the fields that index contains. I'm working on adding indexes to an app that already list what fields it needs but doesn't know what index they are associated to. So I have something like hash value fields md5 and MD5. They are different because of the source they come from but I need to find the index they live to add it. I also think it would just be useful for audit purposes so if expected fields can be confirmed at a glance. Please let me know if you have any questions. Thank you! Best, Brian ... View more

Hey everyone! Has anyone ever experienced jobs running over 100%, sometimes as high as 150%/160% and not completing? It ends up causing the maximum concurrent searches to be reached and makes new jobs not run.   We currently have about 220 correlation searches running and this had not been an issue before.   Any and all feedback is appreciated! ... View more

Hello! I was asked to find what IP addressable devices are listening on port 80 on our network. Can I find this information through a query? I'm new to Splunk analysis so I apologize if this seems basic. Any and all help is greatly appreciated. Thanks! ... View more