How do we find total number of host or source type reporting splunk instance. Report should consider host across the cluster?
Answer Posted / Manish Arora
To find the total number of hosts or source types reporting to a Splunk instance, you can use the `spath stats index=_internal/sourcetypes` command. This will give you a summary of all sourcetypes along with their count of events. To get this information across the cluster, you would need to run this command on each node and then aggregate the results.
| Is This Answer Correct ? | 0 Yes | 0 No |
Post New Answer View All Answers