List all of your lookups

July 31, 2019•13 words

| rest splunk_server=local /servicesNS/-/-/data/transforms/lookups | fields title eai:appName type filename collection

Subscribe to the author's posts

You'll only receive email when they publish something new.

More from automine

Search to see number of concurrent searches

June 20, 2019•27 words

Courtesy of David Paper index=_internal earliest=-1h group=search_concurrency host=<search head glob> ("system total") | rex field=_raw mode=sed "s/system total/user=system/g" |eval user=coalesce(user,"system") | timechart max(active_hist_searches) by user ...

Read post

Index config check

September 10, 2019•70 words

| rest splunk_server_group=dmc_group_indexer /servicesNS/-/-/data/indexes | fields splunk_server title repFactor homePath homePath_expanded coldPath coldPath_expanded thawedPath thawedPath_expanded summaryHomePath_expanded tstatsHomePath tstatsHomePath_expanded | eval Index = title, hot = mvappend(homePath, homePath_expanded), cold = mvappend(coldPath, coldPath_expanded), thawed = mvappend(thawedPath, thawedPath_expanded), summaries = summaryHomePath_expanded, dma = mvappend(tstatsHomePath, ts...

Read post