List of Sourcetypes Sent by Forwarder _internal SplunkNinja Vote Up +4 Vote Down -4You already voted! The following Splunk search will show a list of sourcetypes (or perhaps sources I need to confirm) being sent by each Forwarder: index="_internal" |where host!=splunk_server | stats values(series) as Sourcetypes by host Share This: Tagged: _internalsourcetypesplunkd