Splunk Search for List of Apps Deployed to Deployment Clients Copy
| rest splunk_server=local /services/deployment/server/applications | search serverclass=* | table title serverclasses stateOnClient
0 comments
Splunk Search for Extractions using regex in transforms.conf Copy
| rest /services/data/transforms/extractions | table eai:acl.app, title, SOURCE_KEY, REGEX, FORMAT, DEST_KEY | sort eai:acl.app title | eval DEST_KEY=if(DEST_KEY="","N/A",DEST_KEY) | rename eai:acl.app as App, title as Title, SOURCE_KEY as "Source Key", REGEX as RegEx, FORMAT as Format, DEST_KEY as "Dest Key"
0 comments
Splunk Search for Field extractions in props.conf Copy
| rest /services/data/props/extractions | table stanza type attribute value | sort stanza
0 comments
Splunk Search for List of inputs Copy
| rest /services/data/inputs/all | table index source sourcetype title starttime endtime interval | eval interval=if(isnull(interval),"Not a scripted input",interval) | fillnull value="Null" | eval starttime=strftime(starttime,"%b %d, %Y %H:%M:%S"), endtime=strftime(endtime,"%b %d, %Y %H:%M:%S") | rename index as Index, source as Source, sourcetype as Sourcetype, title as Title, starttime as "First Event" endtime as "Latest Event", interval as Interval
0 comments