Lyx.Splunk

6 years, 3 months ago

Lyx.Splunk commented on the post, Number of Hosts Associated with a Serverclass

In reply to: SplunkNinja wrote a new post The following query will list the number of hosts associated with all serverclasses on your Splunk Deployment server. This query should be run on your Deployment Server. | rest […] View

If this query does not work for you try:
| rest /services/deployment/server/clients splunk_server=local | table hostname applications.*.serverclasses | untable hostname, applications, serverclass | rex field=applications “applications.(?.+).serverclasses” | stats dc(hostname) as hostname b

Members

Lyx.Splunk