How to List the Number Of Indexes In An Indexer
Hi everyone !!!!
Hope you are enjoying the blogs posts. Today we have come with a new topic of Splunk. We will show you how to list the number of indexes in an Indexer. Follow the below steps to find the number of indexes in an indexer.
Step 1:
a) At first login to the indexer by admin credentials.
b) Click on Search & Reporting
c) Then write a command to list the indexes names in the indexer.
index="_*" OR index="*" | table index | dedup index
Also run this above command for all time so that all the indexes names can be found.
See we are getting a list of indexes names in this indexer. But one problem is there. It will show only non-empty indexes. To overcome this problem see the Step 2.
Step 2:
a) At first login to the indexer by admin credentials.
b) Click on Search & Reporting
c) Then write a command to list the indexes names in the indexer.
| rest /servicesNS/-/search/data/indexes | table title | dedup title
Also run this above command for all time so that all the indexes names can be found. By the rest command we can easily get the data from Splunk REST end point.
It will show the all empty and non-empty indexes in this indexer.
Hope this has helped you in achieving the below requirement without fail !!
How to List the Number Of Indexes In An Indexer
Happy Splunking !!
How do you find out the daily usage of each index as well?
Hi Magnus ,
See the below link to get the daily usage of each index
https://splunkonbigdata.com/2018/09/27/how-to-find-the-memory-consumption-of-metadata-and-indexes-in-splunk/