List of Sourcetypes Sent by Forwarder _internal SplunkNinja 4 3 The following Splunk search will show a list of sourcetypes (or perhaps sources I need to confirm) being sent by each Forwarder: index="_internal" |where host!=splunk_server | stats values(series) as Sourcetypes by host 1 index="_internal" |where host!=splunk_server | stats values(series) as Sourcetypes by host Share This: Tagged: _internalsourcetypesplunkd
