How to show which deployment server in configured to pull data from?
Answer / Bhoopendra Singhkhey
To view the deployment server pulling data for a specific index, use the command `index=<index> | stats latest(ts-isindexopen) as isopen, latest(ts-deploytime) as deploytime by _internal.host`. This will show the timestamp when the index was last opened and the deployment time of the server pulling data.
| Is This Answer Correct ? | 0 Yes | 0 No |
What is time zone property in splunk?
What is the use of replacing command?
Differentiate between inputlookup & outputlookup commands.
How data ages in splunk?
What are the lookup command and its use case?
What do you mean by summary index?
What is the difference between the splunk app framework and splunk sdks?
How would you handle/troubleshoot splunk license violation warning error?
What are three versions if splunk?
Explain types of search modes in splunk?
What is the eval command?
What is the role of Deployment server?