SPL
List Inputs using REST
Description
As the title says. Pretty nice Splunk Search if you've forgotten what inputs you have configured and need a central place to list them.
0 0
| rest /services/data/inputs/all | convert ctime(starttime) AS "Start Time" | convert ctime(endtime) AS "End Time" | table index interval source sourcetype title updated starttime endtime "Start Time" "End Time"
Comments
1 total
Hi, \r\nHow can I target a specific index instead of /all ? Thank you.
Leave a comment
You must log in to post a comment.