Monitoring Splunk

Report generate

sahildb
Engager

We need to generate report in splunk which can tell us my log sources and all server details are reporting to splunk.

 

 

is there any query we can use to fetch all the details.

Labels (1)
0 Karma
1 Solution

manjunathmeti
Champion

Hi @sahildb ,

Use tstats command to get the data.

| tstats count where index="*" by host

| tstats count where index="*" by source

 

If this reply helps you, an upvote/like would be appreciated.

View solution in original post

0 Karma

manjunathmeti
Champion

Hi @sahildb ,

Use tstats command to get the data.

| tstats count where index="*" by host

| tstats count where index="*" by source

 

If this reply helps you, an upvote/like would be appreciated.

0 Karma
Get Updates on the Splunk Community!

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL  The Splunk AI Assistant for SPL ...

Buttercup Games: Further Dashboarding Techniques (Part 5)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Customers Increasingly Choose Splunk for Observability

For the second year in a row, Splunk was recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for ...