As the title says. Pretty nice Splunk Search if you’ve forgotten what inputs you have configured and need a central place to list them.
| rest /services/data/inputs/all | convert ctime(starttime) AS "Start Time" | convert ctime(endtime) AS "End Time" | table index interval source sourcetype title updated starttime endtime "Start Time" "End Time"
Hi,
How can I target a specific index instead of /all ? Thank you.