Getting Data In

Metrics indexes missing in REST-API listing?

DATEVeG
Path Finder

Hi,

we created an index overview dashboard for our users. They get a list of all available indexes, the retention time per index and if the current user has access permissions for that index. Nice 🙂
The basis for that index listing is the following query:

| rest /services/data/indexes 

Now with Splunk 7.x we are also using the new metric store. However the new metric indexes are not shown in the above query!

There already seems to be a new field datatype, which should indicate the index type (metric or event): http://docs.splunk.com/Documentation/Splunk/7.1.1/RESTREF/RESTintrospect#data.2Findexes
But all this doesn't count, because metrics indexes aren't shown at all.

This is happing for us in version 7.0 and also in version 7.1.

Is anyone else experiencing this?

Thanks!
- Lorenz

0 Karma
1 Solution

thaggie_splunk
Splunk Employee
Splunk Employee

Hi Lorenz,

We didn't want to return metrics indexes by default as people with existing code would suddenly start to get indexes that needed to be queried in a different way.

In the link you gave the first parameter listed for GET /data/indexes is "datatype", this can be "all", "event" or "metric" - "event" is the default.

So to list all indexes:

| rest /services/data/indexes datatype=all

View solution in original post

thaggie_splunk
Splunk Employee
Splunk Employee

Hi Lorenz,

We didn't want to return metrics indexes by default as people with existing code would suddenly start to get indexes that needed to be queried in a different way.

In the link you gave the first parameter listed for GET /data/indexes is "datatype", this can be "all", "event" or "metric" - "event" is the default.

So to list all indexes:

| rest /services/data/indexes datatype=all
Get Updates on the Splunk Community!

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...