Splunk Searches | A collection of useful Splunk SPL

Splunk Search for Information About Deployment Clients Copy


				| rest splunk_server=local /services/deployment/server/clients | table hostname ip instanceName utsname package splunkVersion

0 comments

[0]

Splunk Search for Last Time a Correlation Search Was Updated Copy


				| rest splunk_server=local /servicesNS/-/-/saved/searches | where match('action.correlationsearch.enabled',"1|(?i)true") | table title search updated

0 comments

[0]