I've read about the pivot and datamodel commands. What I'm trying to do is run some sort of search in Splunk (rest perhaps) to pull out the fields defined in any loaded datamodel. I'm not trying to run a search against my data as seen through the eyes of any particular datamodel. In other words I'd like an output of something like
DataModel Object Fields
Web Web action, app, bytes, bytes_in, ...
I'm not as concerned about the exact formatting as much as the list of fields. You can run something like this but the description field is a bear to go through
| rest /servicesNS/-/-/datamodel/model | dedup title | table title description
↧