Splunk search for Hosts associated with all indexes
Copy
| tstats values(host) as host where index=* by index
This search will provide details on which hosts are reporting to which indexes. This can be particularly helpful in identifying hosts that are not reporting expected data
0 comments
[0]
[0]
[0]
[0]
Sign in or Register to submit a comment