Skip to content

Instantly share code, notes, and snippets.

@gouravtiwari

gouravtiwari/Splunk Queries

Created November 23, 2016 18:36
Show Gist options
  • Save gouravtiwari/1b9b9455192ca0e49b07d84b2d68d497 to your computer and use it in GitHub Desktop.
Save gouravtiwari/1b9b9455192ca0e49b07d84b2d68d497 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Splunk Queries
All Indices:
| eventcount summarize=false index=* index=_* | dedup index | fields index
Groupe by source type:
| tstats values(sourcetype) where index=* group by index
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment