Is there possibility to find index name for the host included?

[JGP]

Is there any possibility to find the index name mapped to the host from any search query(internal index), reason behind this we have 200+ forwarder which needs to be upgraded for this we have to inform the application team to get it upgraded. 

[gcusello]

Hi @JGP,

if you need the list of each index containing logs from an host, you could run something like this:

| metasearch index=*
| stats values(index) AS index count BY host

Ciao.

Giuseppe