list_sources
Discover and enumerate all available data sources from a configured Splunk instance. This tool helps with data discovery, troubleshooting, and understanding the data landscape by providing a comprehensive inventory of data sources across all indexes.
Instructions
Discover and enumerate all available data sources from the configured Splunk instance using the metadata command. This tool provides a comprehensive inventory of data sources across all indexes, helping with data discovery, troubleshooting, and understanding the data landscape in your Splunk environment. Sources represent the origin points of data such as log files, network streams, databases, and other data inputs.
Use Cases:
Data discovery and cataloging
Troubleshooting missing data sources
Understanding data flow and origins
Planning data retention and archival
Security analysis and audit trails
Response Format: Returns a dictionary with 'status' field and 'data' containing:
sources: Sorted array of all data source paths/identifiers
count: Total number of unique sources discovered
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||