The metadata command has only index and splunk_server (indexers/search peers) filter, so either you can filter your host information like this
| metadata type=hosts index=* | where host="YourHostHere"
OR use this to get data for just your host.
| tstats count as totalCount min(_time) as firstTime max(_time) as lastTime max(_time) as recentTime WHERE index=* host="YourHostHere" by host
... View more
Hi,
Thanks much for responding on this. Actually am now downloaded the app and editing the dashboards as per our pre-existing data.
Is that possible ryt?
Thanks!!
... View more