SPL
Splunk Apps added to an instance
Description
1 0
| rest /services/deployment/server/clients splunk_server=local | table hostname applications*.stateOnClient | untable hostname applications value | eval applications=replace(applications,"applications\.(\w+)\.stateOnClient","\1") | stats values(applications) as applications by hostname
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.