The Security Analytics Core database index has a built-in debugging feature called inspect that provides detailed information about the composition of its indexes. The index inspect feature is located at /index/inspect in every Core service configuration tree. Services that do not actually have an index, like Broker, do not have the /index/inspect feature.
This parameter may be set to the value all-slices to collect inspect information about every slice in the index. If it is not set, information on the current, most recently created slice is returned.
Inspect returns many rows of key value pairs that represent the state of the index.
The first row returned for every slice is a summary with the following values.
There will be per-index summary rows returned for each index. Only value-level indexes are reported.
Slice Summary Footer
The last row in each inspect report contains cumulative statistics for all the indexes in the slice.