list_sources
Retrieve a comprehensive inventory of all data sources from Splunk indexes. Use for data discovery, troubleshooting missing data, and understanding data flow.
Instructions
Discover and enumerate all available data sources from the configured Splunk instance using the metadata command. This tool provides a comprehensive inventory of data sources across all indexes, helping with data discovery, troubleshooting, and understanding the data landscape in your Splunk environment. Sources represent the origin points of data such as log files, network streams, databases, and other data inputs.
Use Cases:
Data discovery and cataloging
Troubleshooting missing data sources
Understanding data flow and origins
Planning data retention and archival
Security analysis and audit trails
Response Format: Returns a dictionary with 'status' field and 'data' containing:
sources: Sorted array of all data source paths/identifiers
count: Total number of unique sources discovered
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||