How do we find total number of host or source type reporting splunk instance. Report should consider host across the cluster?
Answer / Manish Arora
To find the total number of hosts or source types reporting to a Splunk instance, you can use the `spath stats index=_internal/sourcetypes` command. This will give you a summary of all sourcetypes along with their count of events. To get this information across the cluster, you would need to run this command on each node and then aggregate the results.
| Is This Answer Correct ? | 0 Yes | 0 No |
What is difference between stats vs transaction command?
Briefly explain the splunk architecture?
What is the eval command?
What are important configuration files in Splunk?
Discuss about the sequence in which splunk upgrade can be done in a clustered environment?
Explain file precedence in splunk.
Differentiate between inputlookup & outputlookup commands.
How splunk avoids duplicate log indexing?
Explain data models and pivot?
Explain the use of top command in splunk?
What is a join command?
How To specify minimum disk usage in splunk?