Getting Data In

Is there an easy way to export to csv a list of all my forwarder clients from my deployment server?

bcusick
Communicator

Hi,

Is there an easy way of exporting a list of all my forwarder clients from my deployment server to csv? I just need a list of them without having to search for them via active data in Splunk.

Thanks!
B

rwright6
Engager

Try this:

| rest /services/deployment/server/clients | table hostname

jlemoine
Path Finder

This one works for me. Have to add the " | table hostname "

0 Karma

marcoscala
Builder

adding "|table hostname" prevent the browser to hang because there are maybe too many columns.
Thanks!

0 Karma

aaronkorn
Splunk Employee
Splunk Employee

On the DS you should be able to run | rest /services/deployment/server/clients to generate a base search to cleanup/filter then export.

tmeader
Contributor

This returns nothing on my deployment server, despite having ~126 clients. Any ideas? I really could use something like this though, as the immutability of the built in "Forwarder management" dashboard makes it essentially useless.

Thanks.

mandrewjeski
Explorer

ditto, doesn't work

0 Karma

ddrillic
Ultra Champion

Works for me when running it on the UI of the deployment server.

0 Karma

shawngarrettsgp
Path Finder

| rest /services/deployment/server/clients | table hostname,ip

Referencing from here
http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTdeploy

0 Karma

mikkorh
Explorer

Reviving this from the dead in case someone else suffers from the "no results":

| rest splunk_server=local /services/deployment/server/clients | table hostname,ip

mendesjo
Path Finder

same here.. nothing.. another query that doesn't work.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk on November 6 at 11AM PT, and empower your SOC to reach new heights! Duration: ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...