SPL
List of Sourcetypes Sent by Forwarder
Description
The following Splunk search will show a list of sourcetypes (or perhaps sources I need to confirm) being sent by each Forwarder:
4 4
index="_internal" |where host!=splunk_server | stats values(series) as Sourcetypes by host
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.