List of Sourcetypes Sent by Forwarder

The following Splunk search will show a list of sourcetypes (or perhaps sources I need to confirm) being sent by each Forwarder:

index="_internal" |where host!=splunk_server | stats values(series) as Sourcetypes by host
Share This:

Leave A Comment?